Comodo ModSecurity rules not updating

[cmaxwell]

Hello,

We have enabled Comodo ModSecurity as the WAF rule set in Plesk 12.5.30 with "Update rule sets" set to "Daily", however the rules don't appear to be updating.

I have tried running the rule update manually:

plesk php /usr/local/psa/admin/plib/DailyMaintainance/script.php -f UpdateModSecurityRuleSet daily

But it does not seem to be downloading the rules.

In the /var/lib/plesk/cfgmon/zzzz_cwaf_security2.conf_2016_02_04_03_50_21_723365 file, there is the following content:

<IfModule !mod_security2.c>
  LoadModule security2_module  modules/mod_security2.so
</IfModule>

<IfModule mod_security2.c>

  SecServerSignature "Protected by COMODO WAF"

  SecRuleEngine On
  SecAuditEngine RelevantOnly
  SecAuditLog /var/log/httpd/modsec_audit.log
  SecDebugLog /var/log/httpd/modsec_debug.log
  SecAuditLogType Serial
  SecDebugLogLevel 0
  SecRequestBodyAccess On
  SecDataDir /tmp
  SecTmpDir /tmp
  SecPcreMatchLimit 250000
  SecPcreMatchLimitRecursion 250000
  Include "/usr/local/cwaf/etc/cwaf.conf"
</IfModule>

After checking it seems /usr/local/cwaf does not exist.

Is there something else we should do to get this to work properly?

Thanks,
Chris

 

[IgorG]

Try to enable Plesk debug mode https://kb.odin.com/en/120101 and run update manually again with

# /usr/local/psa/bin/sw-engine-pleskrun /usr/local/psa/admin/plib/DailyMaintainance/script.php -f UpdateModSecurityRuleSet

Check possible errors in output.