mod security for apache


i wanted to secure apache by installing modsecurity. I read harry sufehmi's tutorial on how to set up a debian server on linode. If I install modsecurity by typing apt-get install libapache-mod-security, am I going to create problems mixing packages? I wasn't able to include it and recompile apache from source.

I'm running debian 3.1 with 2.4.29

I know there were problems mixing stable and unstable packages but is this still the case?

Thanks for your help


2 Replies

You don't need to mix stable/unstable packages, or compile apache.

libapache-mod-security is already in the Debian stable repository: … d-security">

The following command would do fine:

apt-get update
apt-get install libapache-mod-security

mod_security is very nice.

You might want to install bastille-linux too. It is available on debian via apt-get and helps you secure your OS. It will present security info and ask a series of questions (mostly yes/no) to help make the OS more secure. Takes about 10 minutes to complete if you read the info rather than just going with the default answers.


Please enter an answer

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct