notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
Port details on branch 2025Q2
mod_security Intrusion detection and prevention engine
2.9.10 www on this many watch lists=0 search for ports that depend on this port This port version is marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 2.9.10Version of this port present on the latest quarterly branch.
Maintainer: joneum@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2025-06-06 06:30:06
Last Update: 2025-06-06 06:29:08
Commit Hash: 10c8a4a
Also Listed In: security
License: APACHE20
WWW:
https://www.modsecurity.org/
Description:
ModSecurity is an embeddable web application firewall. It provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring and real-time analysis with no changes to existing infrastructure. It is also an open source project that aims to make the web application firewall technology available to everyone.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (14 items)
Collapse this list.
  1. /usr/local/share/licenses/ap24-mod_security-2.9.10/catalog.mk
  2. /usr/local/share/licenses/ap24-mod_security-2.9.10/LICENSE
  3. /usr/local/share/licenses/ap24-mod_security-2.9.10/APACHE20
  4. @comment bin/mlogc
  5. @comment bin/mlogc-batch-load.pl
  6. bin/rules-updater.pl
  7. @sample etc/apache24/modules.d/280_mod_security.conf.sample
  8. @sample etc/modsecurity/modsecurity.conf.sample
  9. etc/modsecurity/unicode.mapping
  10. lib/mod_security2.so
  11. libexec/apache24/mod_security2.so
  12. @owner
  13. @group
  14. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • ap24-mod_security>0:www/mod_security
To install the port:
cd /usr/ports/www/mod_security/ && make install clean
To add the package, run one of these commands:
  • pkg install www/mod_security
  • pkg install ap24-mod_security
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: ap24-mod_security
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1749190237 SHA256 (owasp-modsecurity-ModSecurity-v2.9.10_GH0.tar.gz) = d18bf74fa2073a6aad8e08a6f46c1eaac6c1841afb0b309b3acc54788a0b05d0 SIZE (owasp-modsecurity-ModSecurity-v2.9.10_GH0.tar.gz) = 3901245

Packages (timestamps in pop-ups are UTC):
ap24-mod_security
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest2.9.122.9.122.9.32.9.122.9.12n/an/an/a
FreeBSD:13:quarterly2.9.122.9.122.9.62.9.10_12.9.12n/an/an/a
FreeBSD:14:latest2.9.122.9.122.9.62.9.10_12.9.122.9.6-2.9.6
FreeBSD:14:quarterly2.9.122.9.12-2.9.10_12.9.122.9.62.9.62.9.6
FreeBSD:15:latest2.9.122.9.12n/a2.9.10_1n/an/a2.9.62.9.6
FreeBSD:15:quarterly2.9.122.9.12n/a-n/an/a--
FreeBSD:16:latest2.9.122.9.12n/a-n/an/a--
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. apxs : www/apache24
  2. pkgconf>=1.3.0_1 : devel/pkgconf
  3. libtool : devel/libtool
  4. perl5>=5.36<5.37 : lang/perl5.36
  5. autoconf>=2.72 : devel/autoconf
  6. automake>=1.17 : devel/automake
Runtime dependencies:
  1. apxs : www/apache24
  2. perl5>=5.36<5.37 : lang/perl5.36
Library dependencies:
  1. libpcre2-8.so : devel/pcre2
  2. libapr-1.so : devel/apr1
  3. libyajl.so : devel/yajl
  4. libcurl.so : ftp/curl
  5. libgdbm.so : databases/gdbm
  6. libexpat.so : textproc/expat2
  7. libdb-18.1.so : databases/db18
  8. libxml2.so : textproc/libxml2
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for ap24-mod_security-2.9.10: DOCS=on: Build and/or install documentation FUZZYHASH=off: Allow matching contents using fuzzy hashes with ssdeep LUA=off: Lua scripting language support MLOGC=off: Build ModSecurity Log Collector ===> Use 'make config' to modify these settings
Options name:
www_mod_security
USES:
apache bdb:18 gnome perl5 pkgconfig shebangfix autoreconf libtool:build
pkg-message:
For install:
You have installed ModSecurity. To enable ModSecurity in Apache, follow the instructions in /usr/local/etc/apache24/modules.d/280_mod_security.conf Most users will use the signatures from the OWASP Core Rule Set (CRS). For configuration instructions, see /usr/local/share/doc/mod_security2/README.
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://codeload.github.com/owasp-modsecurity/ModSecurity/tar.gz/v2.9.10?dummy=/
Collapse this list.

Number of commits found: 1

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
2.9.10
06 Jun 2025 06:29:08
commit hash: 10c8a4ae2497caf86fefce1142aed8e203c8a074commit hash: 10c8a4ae2497caf86fefce1142aed8e203c8a074commit hash: 10c8a4ae2497caf86fefce1142aed8e203c8a074commit hash: 10c8a4ae2497caf86fefce1142aed8e203c8a074 files touched by this commit This port version is marked as vulnerable.
Kurt Jaeger (pi) search for other commits by this committer
Author: Einar Bjarni Halldórsson
www/mod_security: 2.9.6 -> 2.9.10

- Trustwave has announced the transfer of ModSecurity custodianship to OWASP
  in January 2024
- uses pcre2 instead of pcre

PR:		278180
Submitted-by:	Pascal Christen <pascal.christen@hostpoint.ch>
Reviewed-by:	Dani I. <i.dani@outlook.com>
Changes:	https://github.com/owasp-modsecurity/ModSecurity/releases
Security:	CVE 2025-47947, CVE 2025-48866
(cherry picked from commit dd398a9719057d8089c51e1e3ddbf8d25241f051)

Number of commits found: 1