Error creating rule: Failed to resolve operator: detectSQLi

almssp · February 26, 2015, 11:00am

Since last night’s(26.02) update i’m getting this error

Starting httpd: Syntax error on line 4061 of /etc/httpd/modsecurity.d/cwaf/rules/cwaf_05.conf:
Error creating rule: Failed to resolve operator: detectSQLi

Can anyone help ?

almssp · February 26, 2015, 11:10am

Nervermind, I was using 2.7.3 version and apparently that function came up on 2.7.4.

TDmitry · February 26, 2015, 11:27am

Yep, always make sure you are using the latest ModSecurity.

Chris-M · April 2, 2015, 9:37pm

This is a problem for RHEL/CentOS servers because the official repositories only offer mod_security-2.7.3.

Is there a workaround so we can use the more recent rulesets without needing to use an unofficial version of the mod_security package?

oleg.tsygany · April 3, 2015, 7:56am

Yes, please try these RPM packages:
http://pkgs.org/search/mod_security?type=name

Regards, Oleg

Chris-M · April 30, 2015, 11:52am

Thanks for your reply.

Are you suggesting that we use the ART 2.8.0 mod_security packages instead of 2.7.3-3 from EPEL?

oleg.tsygany · April 30, 2015, 4:03pm

Yes. 2.8.0 is improved greatly. And 2.9.0 is on the way