Mod_sec Rules

[kjlord]

Hello,

Please give me mod_sec rules details i.e like how to create our own global rules to disable/restricting few files and folders access.
If there is any other way to do this, suppose we need to disable folder like, hacked./ or any word start/ends with hacked should be disabled or it shall not be access via http.


Regard

 

[24x7server]

You can disable the file access through your web server using the mod_sec. Please check the following post and block your file in mod_sec

http://forums.cpanel.net/f185/prevent-block-specific-files-uploading-server-344911.html#post1387621

 

[cPanelMichael]

Hello

You can browse to the following option if you are seeking a visual interface to add/modify rules:

"WHM Main >> Plugins >> Mod Security"

Thank you.

 

[quizknows]

If you want to make your own rules, I recommend the reference manual:

https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual

Something like this would deny web access to anything with the word 'hacked' after the domain name. This is an overly broad rule and I don't recommend its use, only as an example:

SecRule REQUEST_URI "hacked" "t:lowercase,id:12345"

 

[kjlord]

Hello,

Thanks..