modsecurity

  1. S

    Issue with Mod security and SecConnReadStateLimit

    I am trying to use SecConnReadStateLimit directive to limit the number of connections per IP. If I set the limit to be anything smaller than 256, the website is completely unaccessible. For example, if I set it to 100, here is what I saw from the error log: [256] of 100 allowed in READ state...
  2. Osama Tariq

    ModSecurity Logs in cPanel

    Is it possible to display any other logs in cpanel file manager for user end ?
  3. jonh

    ModSecurity disabled but ModSecurity: Access denied with redirection to

    ModSecurity is enabled, I'm not sue what I wasn't seeing the settings pages before. I'm just not sure why one website would be having this issue. It's basically making the website inaccessible. It's a basic wordpress website. It was working fine on another cpanel server just the other day. I...
  4. icandoit

    Need to disable cpanel modsecurity for one folder only

    My chat folder gives so many errors How to disable mod security for only one folder?
  5. S

    ModSecurity + MPM ITK compatibility

    Apache Module: MPM ITK - EasyApache 4 - cPanel Documentation states however Apache Module: ModSecurity - EasyApache - cPanel Documentation states: So is Modsec + MPM ITK compatible in EA3 or EA4? Would use ModRuid2 but no cache/memcache (I presume MPM ITK will work with caching)
  6. N

    Whitelist for Mod Security available?

    Hi guys, Sunday I have installed Mod Security on our VPS (this is our first time we are using Mod Security). Unfortunately it has banned all visitors, except me. This is generally not a problem, but to be honest this time I have no idea how to unban those users. Does anyone have an idea? If I...
  7. sahostking

    cpanel error with modsecurity

    Trying to install mod security vendor which seems to work fine on all our other servers. But one particular server is giving this error: Not sure why but I'm getting this on one server. Probably server issue? How to fix? Error:API failure: The system could not download the file...
  8. F

    Whitelist an IP address in Modsecurity

    How do I whitelist an IP address in Modsecurity ? One of our accounts uses the sucuri firewall and all traffic from sucuri is being blocked in modsecurity.
  9. C

    ModSecurity: Rule processing failed.

    Yet another ModSecurity thread... So as per our other recent post, we've recently switched from our own customized version of the AtomiCorp rules to the OWASP rules provided by cPanel. On all of our servers, /usr/local/apache/logs/error_log is filled with these: [Mon Feb 09 18:51:54...
  10. S

    OWASP - mod security and wordpress

    I updated Cpanel to the version that supports OWASP and enabled it Everything seemed fine on most sites until I tried to edit a wordpress page Various issues including unable to edit pages - editing pages results in odd behavior when I disabled the ruleset - wordpress went back to...
  11. M

    Feature Showcase - ModSecurity - More Information?

    See attachment for what I saw when I attempted to log into WHM recently. However, clicking on the "More Information" link brought me to http://go.cpanel.net/modsecuritydocs which then redirected to http://confluence0.cpanel.net/display/LC/ModSecurity+-+cPanel+UI?1 which doesn't load correctly...