Automate the rule updates ?

Free Modsecurity rules - Comodo Web Application Fi
#1

Hi,

Any way to automate the rule updates without installing your client ?
Couldn’t find any reference for API in your docs.

Eli.

#2

Hi elialum

It possible with crontask, running rules update script (located at /var/cpanel/cwaf/scripts/update.pl on cPanel).
However i’d recommend to wait until client 1.8 released. It will contain auto-update feature.

#3

Hi,

Thanks, I’ve noticed that on a cPanel server. However, I need to update rules on a non cPanel server (no control panel at all).
I don’t mind writing the script for the updater, just need some reference about it in their docs.

Eli.

#4

Hi!
Please, try to do the next steps:

  1. wget --no-check-certificate https://waf.comodo.com/cpanel/cwaf_client_install.sh
  2. bash cwaf_client_install.sh
    In installation process you will be asked where files to extract. Also you’ll get instructions to make change in your mod_security.conf. After installation complete restart your web-server. You’ll get a directory /<cwaf_path>/scripts, where will be script update.pl. You can add this script in crontab to update rules, for example, once a week. Mod_security rules will be in /<cwaf_path>/rules.
#5

I see that the cPanel plugin has an updater now. Does that update the rules, or just the plugin / client?

#6

This updater is for update the rules only.