ModSecurity is a tool that will filter malicious web server requests. DirectAdmin offers a graphical user interface where you can see the blocked requests for your sites or you can disable rules. Sometimes there are false positives, so you may…
For whitelisting an IP only for a specific ModSecurity rule, you can use the ruleRemovebyID option for the ctl action. ctl description: Description: Changes ModSecurity configuration on a transient, per-transaction basis. Any changes made using this action will affect only…
Do you want to use ModSecurity in a transparent mode? Meaning that no actions will be performed? You can use the SecRuleEngine command. The syntax is: SecRuleEngine On|Off|DetectionOnly The possible values are:On: process rulesOff: do not process rulesDetectionOnly: process rules but…
It's very easy in cPanel to add mod_security rules. It comes with one rule set (OWASP ModSecurity Core Rule Set) but you can also add other rule sets. For third-party rule sets, you will need a yaml file. For example,…
Sometimes it can be useful to know how to whitelist your clients' IPs or URIs of specific locations in mod_security. modsecuritty logo We recommend adding the rule presented below to the file /etc/apache2/conf.d/modsec/modsec2.user.conf . Notice that files might be modified…