Fix: MULTIPART_INVALID_PART connected to wrong internal variable #2785
Conversation
|
I keep getting this error - Unknown variable: &MULTIPART_PART_HEADERS Please how do I update my modsecurity version? Anytime I run sudo yum install mod_security or sudo apt install libapache2-mod-security2, it does not install the latest version which is v3.0.8 |
|
Hello @elexito , There are two actively-maintained branches of ModSecurity: v2 (for use with Apache HTTP Server and IIS) and v3 (for use with nginx). If you are using Apache, the latest version of ModSecurity for that is v2.9.7. MULTIPART_PART_HEADERS is supported in versions beginning with ModSecurity v2.9.6. To use a more recent version of ModSecurity than what is available via apt, the main option is to build the software yourself. There are a number of online guides for this. For example: https://hostadvice.com/how-to/how-to-setup-modsecurity-for-apache-on-ubuntu-18-04/ |
|
Thank you very much
…On Tue, Mar 7, 2023 at 9:25 AM martinhsv ***@***.***> wrote:
Hello @elexito <https://github.com/elexito> ,
There are two actively-maintained branches of ModSecurity: v2 (for use
with Apache HTTP Server and IIS) and v3 (for use with nginx).
If you are using Apache, the latest version of ModSecurity for that is
v2.9.7. MULTIPART_PART_HEADERS is supported in versions begging with
ModSecurity v2.9.6.
To use a more recent version of ModSecurity than what is available via
apt, the main option is to build the software yourself. There are a number
of online guides for this. For example:
https://hostadvice.com/how-to/how-to-setup-modsecurity-for-apache-on-ubuntu-18-04/
—
Reply to this email directly, view it on GitHub
<#2785 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AKO3PBNFJC2RHIICZQPWZ6LW25ANPANCNFSM563HLW6A>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
Despite this bug, MULTIPART_STRICT_ERROR was still being set correctly in this case. However, the 'msg' action in rule 200003 in modsecurity.conf-recommended would not show 'IP 1' properly.