I am learning about IIS7 and modsecurity 2.7.2. I need to have modsecurity working on IIS7. At this time, I am having difficulty making IIS7 see the modsecurity.conf file which is in this folder path:
C:\inetpub\wwwroot\owasp_c
This is the content of modsecurity.conf (Remember, I am just learning about this):
# Turn on rule engine so that it starts processing rules
SecRuleEngine On
#Specify what happens when a rule match occus
#deny: denies the request with status code 403,
#write a log entry
SecDefaultAction "phase:2,deny,log,status:4
This is my website content path:
C:\inetpub\webtest
This website path contains the files:
index.html that has in it:
This is a testing site. Nothing more, nothing less.
and the file I am using to include modsecurity.conf is web.config, which has in it:
<?xml version="1.0" encoding="UTF-8"?>
<configuration>
<system.webServer>
<ModSecurity enabled="true" configFile="C:\inetpub\www
</system.webServer>
</configuration>
I am running this on Windows Server 2008 R2.
Can someone tell me what how to proceed about making a website see the modsecurity.conf file? </div>