Is there a clear documentation to describe the solution?
It's very common and also necessary.
Is there a clear documentation to describe the solution?
It's very common and also necessary.
Maybe this blogpost is useful for you. It explains how to setup modsecurity2 with apache on debian BUT it is written in german. It should be understandable if you only read the "commands" which are in english anyway.
vi /etc/apache2/apache2.conf
Add the following:
<IfModule mod_security2.c>
# Basic configuration options
SecRuleEngine On
SecRequestBodyAccess On
SecResponseBodyAccess Off
# Handling of file uploads
# TODO Choose a folder private to Apache.
# SecUploadDir /opt/apache-frontend/tmp/
SecUploadKeepFiles Off
Restart apache /etc/init.d/apache2 restart