ModSecurity

cPanel Request body no files data length is larger than the configured limit

by
ModSecurity

On a WordPress website hosted on Cpanel server, when editing a page, i get 404 error. On checking ModSecurity logs, found the following Message: Request body no files data length is larger than the configured limit (1048576). Message: collection_store: Failed to access DBM file “/var/cpanel/secdatadir/serverok-session”: Permission denied Apache-Error: [file “apache2_util.c”] [line 277] [level 3] [client … Read more

Nginx ModSecurity Not able to open file

by

On an Nginx server after updating Nginx and ModSecurity, I got the following error [root@localhost ~]# nginx -t nginx: [emerg] “modsecurity_rules_file” directive Rules error. File: /etc/nginx/modsecurity.conf. Line: 275. Column: 51. “/etc/nginx/coreruleset-3.3.2/rules/*.conf”: Not able to open file. Looking at: ‘”/etc/nginx/coreruleset-3.3.2/rules/*.conf”‘, ‘”/etc/nginx/coreruleset-3.3.2/rules/*.conf”‘, ‘/etc/nginx/”/etc/nginx/coreruleset-3.3.2/rules/*.conf”‘, ‘/etc/nginx/”/etc/nginx/coreruleset-3.3.2/rules/*.conf”‘. in /etc/nginx/conf.d/default.conf:5 nginx: configuration file /etc/nginx/nginx.conf test failed [root@localhost ~]# To fix the … Read more

Enable ModSecurity in Cpanel Server

by

Login to WHM. Go to ModSecurity™ Vendors. By default cpanel come with “OWASP ModSecurity Core Rule Set V3.0” rule. To enable it click on “+ install” link right side. To add a third party rule set, click on “Add Vendor” button. To install comodo WAF rules, enter https://waf.comodo.com/doc/meta_comodo_apache.yaml Click “Load”, you will see some info … Read more

Disable ModSecurity for a specific URL

by

On a web site that is protected with ModSecurity, when admin edit HTML pages in admin area, ModSecurity falsely detect it as XSS attack. What we can do is disable specific rules that create this false positive. But in this case, it is bceause HTML is submitted. This application normally done need HTML submitted on … Read more

Install ModSecurity on Ubuntu/Debian

by

To install ModSecurity on Debian/Ubuntu Apache web server, run Enable mod security and restart Apache web server Verify mod_security installed with You will see something like To activate ModSecurity rules, run Edit set Restart Apache Verify mod security is working with command You should see “403 Forbidden” error, Here is another test url, which should … Read more