notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine

Bot filter coming soon

To deter bots pegging the database CPU to 100%, a bot testing filter to be added to the website. This should not affect newsfeeds etc. Anubis seems light-weight - it is already in use within the FreeBSD Project. This notice is just a heads up in case you see something odd. This notice will be updated after Anubis is installed.

Port details on branch 2025Q2
mod_security Intrusion detection and prevention engine
2.9.10 www on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 2.9.10Version of this port present on the latest quarterly branch.
Maintainer: joneum@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2025-06-06 06:30:06
Last Update: 2025-06-06 06:29:08
Commit Hash: 10c8a4a
Also Listed In: security
License: APACHE20
WWW:
https://www.modsecurity.org/
Description:
ModSecurity is an embeddable web application firewall. It provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring and real-time analysis with no changes to existing infrastructure. It is also an open source project that aims to make the web application firewall technology available to everyone.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (14 items)
Collapse this list.
  1. /usr/local/share/licenses/ap24-mod_security-2.9.10/catalog.mk
  2. /usr/local/share/licenses/ap24-mod_security-2.9.10/LICENSE
  3. /usr/local/share/licenses/ap24-mod_security-2.9.10/APACHE20
  4. @comment bin/mlogc
  5. @comment bin/mlogc-batch-load.pl
  6. bin/rules-updater.pl
  7. @sample etc/apache24/modules.d/280_mod_security.conf.sample
  8. @sample etc/modsecurity/modsecurity.conf.sample
  9. etc/modsecurity/unicode.mapping
  10. lib/mod_security2.so
  11. libexec/apache24/mod_security2.so
  12. @owner
  13. @group
  14. @mode
Collapse this list.
Dependency lines:
  • ap24-mod_security>0:www/mod_security
To install the port:
cd /usr/ports/www/mod_security/ && make install clean
To add the package, run one of these commands:
  • pkg install www/mod_security
  • pkg install ap24-mod_security
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: ap24-mod_security
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1749190237 SHA256 (owasp-modsecurity-ModSecurity-v2.9.10_GH0.tar.gz) = d18bf74fa2073a6aad8e08a6f46c1eaac6c1841afb0b309b3acc54788a0b05d0 SIZE (owasp-modsecurity-ModSecurity-v2.9.10_GH0.tar.gz) = 3901245

Packages (timestamps in pop-ups are UTC):
ap24-mod_security
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest2.9.62.9.62.9.32.9.62.9.6-2.9.3-
FreeBSD:13:quarterly2.9.62.9.62.9.62.9.62.9.62.9.62.9.62.9.6
FreeBSD:14:latest2.9.62.9.102.9.62.9.62.9.102.9.6-2.9.6
FreeBSD:14:quarterly2.9.62.9.10-2.9.62.9.102.9.62.9.62.9.6
FreeBSD:15:latest2.9.62.9.6n/a2.9.6n/a2.9.62.9.62.9.6
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. apxs : www/apache24
  2. pkgconf>=1.3.0_1 : devel/pkgconf
  3. libtool : devel/libtool
  4. perl5>=5.36<5.37 : lang/perl5.36
  5. autoconf>=2.72 : devel/autoconf
  6. automake>=1.17 : devel/automake
Runtime dependencies:
  1. apxs : www/apache24
  2. perl5>=5.36<5.37 : lang/perl5.36
Library dependencies:
  1. libpcre2-8.so : devel/pcre2
  2. libapr-1.so : devel/apr1
  3. libyajl.so : devel/yajl
  4. libcurl.so : ftp/curl
  5. libgdbm.so : databases/gdbm
  6. libexpat.so : textproc/expat2
  7. libdb-18.1.so : databases/db18
  8. libxml2.so : textproc/libxml2
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for ap24-mod_security-2.9.10: DOCS=on: Build and/or install documentation FUZZYHASH=off: Allow matching contents using fuzzy hashes with ssdeep LUA=off: Lua scripting language support MLOGC=off: Build ModSecurity Log Collector ===> Use 'make config' to modify these settings
Options name:
www_mod_security
USES:
apache bdb:18 gnome perl5 pkgconfig shebangfix autoreconf libtool:build
pkg-message:
For install:
You have installed ModSecurity. To enable ModSecurity in Apache, follow the instructions in /usr/local/etc/apache24/modules.d/280_mod_security.conf Most users will use the signatures from the OWASP Core Rule Set (CRS). For configuration instructions, see /usr/local/share/doc/mod_security2/README.
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://codeload.github.com/owasp-modsecurity/ModSecurity/tar.gz/v2.9.10?dummy=/
Collapse this list.

Number of commits found: 1

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
2.9.10
06 Jun 2025 06:29:08
commit hash: 10c8a4ae2497caf86fefce1142aed8e203c8a074commit hash: 10c8a4ae2497caf86fefce1142aed8e203c8a074commit hash: 10c8a4ae2497caf86fefce1142aed8e203c8a074commit hash: 10c8a4ae2497caf86fefce1142aed8e203c8a074 files touched by this commit
Kurt Jaeger (pi) search for other commits by this committer
Author: Einar Bjarni Halldórsson
www/mod_security: 2.9.6 -> 2.9.10

- Trustwave has announced the transfer of ModSecurity custodianship to OWASP
  in January 2024
- uses pcre2 instead of pcre

PR:		278180
Submitted-by:	Pascal Christen <pascal.christen@hostpoint.ch>
Reviewed-by:	Dani I. <i.dani@outlook.com>
Changes:	https://github.com/owasp-modsecurity/ModSecurity/releases
Security:	CVE 2025-47947, CVE 2025-48866
(cherry picked from commit dd398a9719057d8089c51e1e3ddbf8d25241f051)

Number of commits found: 1