Quantcast
Channel: All Forums
Viewing all articles
Browse latest Browse all 28058

modsecurity and IIS7

$
0
0

I am learning about IIS7 and modsecurity 2.7.2.  I need to have modsecurity working on IIS7.  At this time, I am having difficulty making IIS7 see the modsecurity.conf file which is in this folder path:

C:\inetpub\wwwroot\owasp_c

<div class="first last">rs\modsecurity.conf


This is the content of modsecurity.conf (Remember, I am just learning about this):

# Turn on rule engine so that it starts processing rules
SecRuleEngine On
#Specify what happens when a rule match occus
#deny: denies the request with status code 403,
#write a log entry
SecDefaultAction "phase:2,deny,log,status:403"


This is my website content path:

C:\inetpub\webtest


This website path contains the files:

index.html that has in it:

This is a testing site. Nothing more, nothing less.


and the file I am using to include modsecurity.conf is web.config, which has in it:

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <ModSecurity enabled="true" configFile="C:\inetpub\wwwroot\owasp_crs\modsecurity.conf" />
      </system.webServer>
</configuration>



I am running this on Windows Server 2008 R2.

Can someone tell me what how to proceed about making a website see the modsecurity.conf file? </div>

Viewing all articles
Browse latest Browse all 28058

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>