Hi ppl! I've updated mod_security of my CentOS 5.x from 2.5.9 to 2.5.13 but now "error_log" doesnt log "Access Denied" message from mod_security once someone hits one mod_security rule. I changed to 2.6.x and it's samething... no "Access Denied" messages on "error_log" file. Then, OSSEC doesnt generate any alert from hits on mod_security rule.
Anyone here is using OSSEC with mod_security 2.6.x and solved this??? Thanks!
