ModSecurity: Transformation Caching Unstable, Fixed, But Deprecated

[Kent Brockman]

Hi, this post is about the Easyapache v4375 (http://changelog.cpanel.net/?tree=STABLE&revision=26118) where modsecurity have been upgraded and refer to the recommended actions to take in order to deactivate transformation caching (http://blog.modsecurity.org/2008/08/transformation.html).
My question is: while I don't upgrade cPanel, where should be done this config modification? Here: /usr/local/apache/conf/modsec2.user.conf ??

Thanks

 

[cPanelKenneth]

Hi, this post is about the Easyapache v4375 (http://changelog.cpanel.net/?tree=STABLE&revision=26118) where modsecurity have been upgraded and refer to the recommended actions to take in order to deactivate transformation caching (http://blog.modsecurity.org/2008/08/transformation.html).
My question is: while I don't upgrade cPanel, where should be done this config modification? Here: /usr/local/apache/conf/modsec2.user.conf ??

Thanks

You should be able to use the mod_sec section in WHM to update your configuration.

 

[Kent Brockman]

You should be able to use the mod_sec section in WHM to update your configuration.

Yes, I'm able to do that, but sincerely I didn't realized that THIS instruction may also be set precisely thru that WHM facility.
This lead me to formulate one more question: the "SecCacheTransformations Off" instruction should be pasted before or after the already existent rulesets?
Thank you