Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Mod_security has a rules updater distributed with their release packages on sourceforge:

Usually, you can run the script and modsec will update the rules for you. However, recently, this feature has stopped working. I get the following 404 error when I attempt to update the ruleset to 2.2.4:

$ ./ -r -prepository/ -Smodsecurity-crs
Could not load GnuPG module - cannot verify ruleset signatures
Fetching: modsecurity-crs/ ...
Failed to retrieve ruleset modsecurity-crs/ 404 Not Found

We have a cron job which downloads and applies the rules frequently. It's been great up till now. Has anybody found a solution to this? Is anybody aware of other free/open repositories with self-update scripts? I've searched the forums, but no luck so far. Any help is greatly appreciate.

share|improve this question

It's looking for 2.2.3, which isn't there, so no surprise it fails. Sounds like you should report a bug to them.

share|improve this answer
For anybody else interested, I've opened a bug for tracking purposes. It can be found here: – Jason Huntley Mar 29 '12 at 21:20

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.