looks like that if you are an ASL customer it does not get enabled by default?
Thanks for the question, but I'm not sure I understand it. ASL automatically enables, setups modsecurity and generates all modsecurity configuration files on the fly, it doesnt use or rely on that file. That file is not used by ASL, and never has been. So for ASL, modsecurity gets enabled by default.
This thread is about the free rpms we put out (the atomic repo is our free yum repository, it is not used by ASL), and those are not used by ASL. so perhaps thats where the confusion lies? This file was removed from the free modsecurity months ago, but those rpms are not used by ASL.
even the delayed rulesets does not include a standard modsecurity config:http://updates.atomicorp.com/channels/rules/delayed/
I'm not sure I follow you. The modsecurity configuration file is provided on the modsecurity page:https://www.atomicorp.com/wiki/index.ph ... x_waf.conf
The installation instructions for modsecurity are provided at the URL below, which explains how to create that configuration file as well as providing a link to one:https://www.atomicorp.com/wiki/index.ph ... rity_Rules
So if you follow those instructions, you'll be right as rain. We specifically do not include a config file with the rules for the same reason no one else does - your modsecurity config file shouldnt change, and the rules are updated several times a day, so that would cause your config to change several times a day! You dont want someone overwriting your custom config file with something new every time theres a new rules update. That would be disastrous, so we dont do it.
Nevertheless, none of this is necessary for ASL, as ASL installs, enables and configures modsecurity for you. These instructions, and files, are for people that are setting up modsecurity themselves.
If you want an all in one package to install, enable, configure, maintain and automatically upgrade modsecurity based on your needs, use ASL. That what its for. If you want to DIY, then follow the instructions in the wiki.
I hope this answers your question, but if I misunderstood your question please let me know and thanks again for your question.