# tar xf mod_evasive_1.10.1.tar.gz

# cd mod_evasive

# ls

CHANGELOG      mod_evasive20.c   mod_evasive20.o    mod_evasiveNSAPI.c

LICENSE        mod_evasive20.la  mod_evasive20.slo  README

Makefile.tmpl  mod_evasive20.lo  mod_evasive.c      test.pl

# apxs -i -a -c mod_evasive20.c

/usr/lib/apr-1/build/libtool --silent --mode=compile gcc -prefer-pic -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i686 -mtune=atom -fasynchronous-unwind-tables -Wformat-security -fno-strict-aliasing  -DLINUX=2 -D_REENTRANT -D_GNU_SOURCE -D_LARGEFILE64_SOURCE -pthread -I/usr/include/httpd  -I/usr/include/apr-1   -I/usr/include/apr-1   -c -o mod_evasive20.lo mod_evasive20.c && touch mod_evasive20.slo

mod_evasive20.c: 在函数‘create_hit_list’中:

mod_evasive20.c:118: 警告：在有返回值的函数中未发现 return 语句

mod_evasive20.c: 在函数‘access_checker’中:

mod_evasive20.c:212: 警告：隐式声明函数‘getpid’

mod_evasive20.c:212: 警告：格式‘%ld’需要类型‘long int’，但实参 3 的类型为‘int’

mod_evasive20.c:229: 警告：忽略声明有 warn_unused_result 属性的‘system’的返回值

mod_evasive20.c: 在函数‘destroy_hit_list’中:

mod_evasive20.c:301: 警告：在有返回值的函数中未发现 return 语句

/usr/lib/apr-1/build/libtool --silent --mode=link gcc -o mod_evasive20.la  -rpath /usr/lib/httpd/modules -module -avoid-version    mod_evasive20.lo

/usr/lib/httpd/build/instdso.sh SH_LIBTOOL='/usr/lib/apr-1/build/libtool' mod_evasive20.la /usr/lib/httpd/modules

/usr/lib/apr-1/build/libtool --mode=install cp mod_evasive20.la /usr/lib/httpd/modules/

libtool: install: cp .libs/mod_evasive20.so /usr/lib/httpd/modules/mod_evasive20.so

libtool: install: cp .libs/mod_evasive20.lai /usr/lib/httpd/modules/mod_evasive20.la

libtool: install: cp .libs/mod_evasive20.a /usr/lib/httpd/modules/mod_evasive20.a

libtool: install: chmod 644 /usr/lib/httpd/modules/mod_evasive20.a

libtool: install: ranlib /usr/lib/httpd/modules/mod_evasive20.a

libtool: finish: PATH="/usr/lib/qt-3.3/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/inotify/bin:/root/bin:/sbin" ldconfig -n /usr/lib/httpd/modules

----------------------------------------------------------------------

Libraries have been installed in:

   /usr/lib/httpd/modules   ------>#被安装到了这里

If you ever happen to want to link against installed libraries

in a given directory, LIBDIR, you must either use libtool, and

specify the full pathname of the library, or use the `-LLIBDIR'

flag during linking and do at least one of the following:

   - add LIBDIR to the `LD_LIBRARY_PATH' environment variable

     during execution

   - add LIBDIR to the `LD_RUN_PATH' environment variable

     during linking

   - use the `-Wl,-rpath -Wl,LIBDIR' linker flag

   - have your system administrator add LIBDIR to `/etc/ld.so.conf'

See any operating system documentation about shared libraries for

more information, such as the ld(1) and ld.so(8) manual pages.

----------------------------------------------------------------------

chmod 755 /usr/lib/httpd/modules/mod_evasive20.so

# vim /usr/local/httpd/conf/httpd.conf

  LoadModule evasive20_module   modules/mod_evasive20.so

# /usr/local/httpd/bin/apxs -i -a -c mod_evasive20.c

/usr/local/apr/build-1/libtool --silent --mode=compile gcc -std=gnu99 -prefer-pic   -DLINUX -D_REENTRANT -D_GNU_SOURCE -D_LARGEFILE64_SOURCE -O2 -pg -pthread -I/usr/local/httpd/include  -I/usr/local/apr/include/apr-1   -I/usr/local/apr-util/include/apr-1  -I/usr/local/apr-iconv/include/apr-1 -I/usr/local/apr-iconv/include  -c -o mod_evasive20.lo mod_evasive20.c && touch mod_evasive20.slo

mod_evasive20.c: In function 'access_checker':

mod_evasive20.c:142: error: 'conn_rec' has no member named 'remote_ip'

mod_evasive20.c:146: error: 'conn_rec' has no member named 'remote_ip'

mod_evasive20.c:158: error: 'conn_rec' has no member named 'remote_ip'

mod_evasive20.c:165: error: 'conn_rec' has no member named 'remote_ip'

mod_evasive20.c:180: error: 'conn_rec' has no member named 'remote_ip'

mod_evasive20.c:187: error: 'conn_rec' has no member named 'remote_ip'

mod_evasive20.c:208: error: 'conn_rec' has no member named 'remote_ip'

mod_evasive20.c:212: warning: implicit declaration of function 'getpid'

mod_evasive20.c:215: error: 'conn_rec' has no member named 'remote_ip'

mod_evasive20.c:221: error: 'conn_rec' has no member named 'remote_ip'

mod_evasive20.c:222: error: 'conn_rec' has no member named 'remote_ip'

mod_evasive20.c:228: error: 'conn_rec' has no member named 'remote_ip'

apxs:Error: Command failed with rc=65536

# tar xf modsecurity-apache_2.5.9.tar.gz

# ls

apache2  doc      modsecurity.conf-minimal         README.TXT  tools

CHANGES  LICENSE  MODSECURITY_LICENSING_EXCEPTION  rules

# cd apache2/

# apxs -i -a -c mod_security2.c

/usr/lib/apr-1/build/libtool --silent --mode=compile gcc -prefer-pic -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i686 -mtune=atom -fasynchronous-unwind-tables -Wformat-security -fno-strict-aliasing  -DLINUX=2 -D_REENTRANT -D_GNU_SOURCE -D_LARGEFILE64_SOURCE -pthread -I/usr/include/httpd  -I/usr/include/apr-1   -I/usr/include/apr-1   -c -o mod_security2.lo mod_security2.c && touch mod_security2.slo

在包含自 modsecurity.h：38 的文件中，

                 从 mod_security2.c：24:

msc_pcre.h:24:18: 错误：pcre.h：没有那个文件或目录

在包含自 modsecurity.h：40 的文件中，

                 从 mod_security2.c：24:

msc_xml.h:25:31: 错误：libxml/xmlschemas.h：没有那个文件或目录

msc_xml.h:26:26: 错误：libxml/xpath.h：没有那个文件或目录

In file included from modsecurity.h:40,

                 from mod_security2.c:24:

# yum install libxml*

# ./configure --with-apxs=/usr/local/httpd/bin/apxs --with-httpd-src=/usr/local/httpd/ --with-pcre=/usr/local/pcre/ --with-apr=/usr/local/apr/bin/apr-1-config  --with-libxml=/usr/     ------>通过编译安装的方法

# make ; make install

make: *** [mod_security2.la] 错误 1

/usr/local/apr/build-1/libtool --silent --mode=compile gcc -std=gnu99 -prefer-pic   -DLINUX -D_REENTRANT -D_GNU_SOURCE -D_LARGEFILE64_SOURCE -O2 -pg -pthread -I/usr/local/httpd/include  -I/usr/local/apr/include/apr-1   -I/usr/local/apr-util/include/apr-1  -I/usr/local/apr-iconv/include/apr-1 -I/usr/local/apr-iconv/include -O2 -g -Wall -I/usr/local/httpd/include -I/usr/local/httpd/include -I. -I/usr/local/apr/include/apr-1 -I/usr/local/apr-util/include/apr-1 -I/usr/local/apr-iconv/include/apr-1 -I/usr/local/apr-iconv/include -I/usr/local/pcre/include -I/usr/local/httpd//srclib/pcre -I/usr/local/pcre/include -I/usr/include/libxml2  -c -o mod_security2.lo mod_security2.c && touch mod_security2.slo

mod_security2.c: In function 'create_tx_context':

mod_security2.c:345: error: 'conn_rec' has no member named 'remote_ip'

mod_security2.c:346: error: 'conn_rec' has no member named 'remote_addr'    ------>#报错的地方

mod_security2.c: In function 'register_hooks':

mod_security2.c:1118: warning: passing argument 1 of 'ap_hook_error_log' from incompatible pointer type

/usr/local/httpd/include/http_core.h:948: note: expected 'void (*)(const struct ap_errorlog_info *, const char *)' but argument is of type 'void (*)(const char *, int,  int,  apr_status_t,  const struct server_rec *, const struct request_rec *, struct apr_pool_t *, const char *)'

apxs:Error: Command failed with rc=65536

# vim mod_security2.c

Libraries have been installed in:

   /usr/local/httpd/modules    ------>#安装到了这里

If you ever happen to want to link against installed libraries

in a given directory, LIBDIR, you must either use libtool, and

specify the full pathname of the library, or use the `-LLIBDIR'

flag during linking and do at least one of the following:

   - add LIBDIR to the `LD_LIBRARY_PATH' environment variable

     during execution

   - add LIBDIR to the `LD_RUN_PATH' environment variable

     during linking

   - use the `-Wl,-rpath -Wl,LIBDIR' linker flag

   - have your system administrator add LIBDIR to `/etc/ld.so.conf'

See any operating system documentation about shared libraries for

more information, such as the ld(1) and ld.so(8) manual pages.

----------------------------------------------------------------------

chmod 755 /usr/local/httpd/modules/mod_security2.so

# ./apachectl start

httpd: Syntax error on line 169 of /usr/local/httpd/conf/httpd.conf: Cannot load modules/mod_security2.so into server: /usr/local/httpd/modules/mod_security2.so: undefined symbol: unixd_set_global_mutex_perms