I compiled it using easy apache, so I dont know how to install it with the optional setting thing. With the gotroot rules my vps has 1gn of ram should I be fine im mean atm my memory is like 67% free. Would I be better off with the default WHM rules?? On another note the one rules in question is only effecting the 1 of my 3 sites here what its saying in log.
[Thu Jul 02 17:23:35 2009] [error] [client 76.123.225.96] ModSecurity: Access denied with code 406 (phase 2). RBL lookup of 96.225.123.76.xbl.spamhaus.org succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/00_asl_rbl.conf"] [line "30"] [id "350000"] [rev "2"] [msg "Global RBL Match: IP is on the xbl.spamhaus.org Blacklist"] [severity "ALERT"] [hostname "www.mysite.com"] [uri "/index.php"] [unique_id "Sk0lbkgsUOAAAA@V4lAAAAAG"]
And this is what its saying on the cpanel/whm mod_sec interface log
2009-07-02 17:23:38 76.123.225.96 / HTTP/1.1
www.mysite.com Access denied with code 406 (phase 2). RBL lookup of 96.225.123.76.xbl.spamhaus.org succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/00_asl_rbl.conf"] [line "30"] [id "350000"] [rev "2"] [msg "Global RBL Match: IP is on the xbl.spamhaus.org Blacklist"] [severity "ALERT"] 406
2009-07-02 17:23:35 76.123.225.96 /index.php HTTP/1.1
www.mysite.com Access denied with code 406 (phase 2). RBL lookup of 96.225.123.76.xbl.spamhaus.org succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/00_asl_rbl.conf"] [line "30"] [id "350000"] [rev "2"] [msg "Global RBL Match: IP is on the xbl.spamhaus.org Blacklist"] [severity "ALERT"] 301
on the logs when posting them here I took out the name of my real site and just put in mysite