Installing ModSecurity2 On Debian Etch

Discussion in 'HOWTO-Related Questions' started by AlArenal, Jul 7, 2007.

  1. AlArenal

    AlArenal New Member

    Hi Falko!

    In your tutorial your forgot to tell how to get receive and install the key for the repository. Without the key you'll receive an error when executing "apt-get update". Adding the key is done with these two commands:

    Code:
    gpg --keyserver pgp.mit.edu --recv-keys C514AF8E4BA401C3
    gpg --armor --export C514AF8E4BA401C3 | apt-key add -
    Unfortunately even then I receive these mesages when attempting "apt-get update":

    Code:
    W: Conflicting distribution: http://etc.inittab.org etch/ Release (expected etch but got )
    W: Probieren Sie »apt-get update«, um diese Probleme zu korrigieren.
    I'm using a fresh clean Debian Etch (64 bit) with the perfect setup applied and ISPConfig installed.

    Any suggestions?
     
  2. falko

    falko Super Moderator ISPConfig Developer

    What's in /etc/apt/sources.list? Did you run
    Code:
    apt-get update
    after modifying it?
     
  3. AlArenal

    AlArenal New Member

    /etc/apt/sources.list
    Code:
    deb http://hetzner:[email protected]/debian/mirror/ etch main non-free contrib
    
    deb http://security.debian.org/ etch/updates main contrib non-free
    deb-src http://security.debian.org/ etch/updates main contrib non-free
    
    deb http://etc.inittab.org/~agi/debian/libapache-mod-security2/ etch/
    
    Output of "apt-get update":
    Code:
    Hole:1 http://download.hetzner.de etch Release.gpg [378B]
    OK   http://download.hetzner.de etch Release
    Ign http://download.hetzner.de etch/main Packages/DiffIndex
    Ign http://download.hetzner.de etch/non-free Packages/DiffIndex
    Ign http://download.hetzner.de etch/contrib Packages/DiffIndex
    OK   http://download.hetzner.de etch/main Packages
    OK   http://download.hetzner.de etch/non-free Packages
    OK   http://download.hetzner.de etch/contrib Packages
    Hole:2 http://security.debian.org etch/updates Release.gpg [189B]
    OK   http://security.debian.org etch/updates Release
    Ign http://security.debian.org etch/updates/main Packages/DiffIndex
    Ign http://security.debian.org etch/updates/contrib Packages/DiffIndex
    Ign http://security.debian.org etch/updates/non-free Packages/DiffIndex
    Ign http://security.debian.org etch/updates/main Sources/DiffIndex
    Ign http://security.debian.org etch/updates/contrib Sources/DiffIndex
    Ign http://security.debian.org etch/updates/non-free Sources/DiffIndex
    OK   http://security.debian.org etch/updates/main Packages
    OK   http://security.debian.org etch/updates/contrib Packages
    OK   http://security.debian.org etch/updates/non-free Packages
    OK   http://security.debian.org etch/updates/main Sources
    OK   http://security.debian.org etch/updates/contrib Sources
    OK   http://security.debian.org etch/updates/non-free Sources
    Hole:3 http://etc.inittab.org etch/ Release.gpg [189B]
    OK   http://etc.inittab.org etch/ Release
    Ign http://etc.inittab.org etch/ Packages/DiffIndex
    Ign http://etc.inittab.org etch/ Packages
    OK   http://etc.inittab.org etch/ Packages
    Es wurden 3B in 1s geholt (2B/s)
    Paketlisten werden gelesen... Fertig
    W: Conflicting distribution: http://etc.inittab.org etch/ Release (expected etch but got )
    W: Probieren Sie »apt-get update«, um diese Probleme zu korrigieren.
    
     
  4. falko

    falko Super Moderator ISPConfig Developer

  5. AlArenal

    AlArenal New Member

    Hm, I'd have to use the amd64 version, but I get an "403 Forbidden" when I try to access this file :confused:

    It seems that currently there is no alternative to compiling the sources and installing the module by myself (as I already did on another machine a couple of months ago). :(
     
    Last edited: Jul 10, 2007
  6. AlArenal

    AlArenal New Member

    I just contacted Alberto Gonzalez Iniesta (the repository maintainer) and he informed me, that he currently has no AMD64 package available due to the fact that he has no access to such a machine runnning Etch.

    He'll drop me a mail once he has built the package.

    So at this time, the HowTo just won't work for Debian Etch (64 bit).
     
  7. header

    header New Member

    Hi!
    I have also some problem with installation of modsecurity. Here is it:
    Can anybody help me?
     
  8. falko

    falko Super Moderator ISPConfig Developer

    Please try
    Code:
    apt-get install libapache2-mod-security2 apache2.2-common
    If that doesn't help - what's in /etc/apt/sources.list?
     
  9. header

    header New Member

    Hi falko!
    Thanks! Its work with :
    BUT after this re-installation PLESK is not working. How can I run it? any ideas?
     
  10. falko

    falko Super Moderator ISPConfig Developer

    I'm sorry, but I don't have any Plesk experience...
     
  11. AlArenal

    AlArenal New Member

    The repository now also inludes an AMD64 package. Currently it depends on libc6 >= 2.5-5 (Debian unstable).
     
  12. AlArenal

    AlArenal New Member

    Installation now works for AMD64 systems using stable packages only. :)

    Only change:

    Alberto Gonzales Iniesta:
     
    Last edited: Jul 23, 2007
  13. wirechief

    wirechief New Member

    This does not work for me
    Couldn't stat source package list http://etc.inittab.org ./ Packages (/var/lib/apt/lists/etc.inittab.org_%7eagi_debian_libapache-mod-security2_etch%5b_url%5d_._Packages) - stat (2 No such file or directory)
    also the ibapache2-mod-security2_2.1.1-0_i386.deb has missing dependancy's
    uilding dependency tree... Done
    libapache2-mod-security2 is already the newest version.
    You might want to run `apt-get -f install' to correct these:
    The following packages have unmet dependencies:
    libapache2-mod-security2: Depends: mod-security2-common (= 2.1.1-0) but it isnot installable
     
  14. falko

    falko Super Moderator ISPConfig Developer

    I guess you put
    Code:
    deb http://etc.inittab.org/~agi/debian/libapache-mod-security2/etch[/url] ./
    into your sources.list. IT should be
    Code:
    deb http://etc.inittab.org/~agi/debian/libapache-mod-security2/etch ./
    instead.
     
  15. wirechief

    wirechief New Member

    You are right, I have made the correction, now have a question as to whether
    this will provide me with the right version of mod security, I am running
    2.6.18-5-486 #1 Sun Aug 12 21:23:09 UTC 2007 i686 GNU/Linux
    with a AMD64 computer,
    after re-reading everything it looks like this is for AMD64 but does it only run with 64bit kernels ?
    I am sorry for my confusion, I cannot remember when I downloaded the debian network install if it supported 64bit, i am presuming it doesn't that it is actually for 32 bit operations.
     
  16. falko

    falko Super Moderator ISPConfig Developer

  17. Ovidiu

    Ovidiu Active Member

    I have some similar problems, encountered after following the tutorial made by falko (linked above) and this thread.

    I have looked on the repository server: http://etc.inittab.org/~agi/debian/libapache-mod-security2/etch/ and there is no mod-security2-common package anywhere !?
     
  18. Ovidiu

    Ovidiu Active Member

    seems to have fixed this !?
     
  19. falko

    falko Super Moderator ISPConfig Developer

  20. Ovidiu

    Ovidiu Active Member

    I think the repository might have just gotten a new version or something... apt-get isntall mod-security.... gave me a could not find package and I did not see it on the browser when checking myself. BUt 5mins later, apt.geet -f install fixed it so it seems the package now appeared in the repository
     

Share This Page