The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
35 views

Mod_security - Syntax error

I have a password protected directory on my web server. To protect that from brute force attack, I tried to add the IP-Based BLocking config as below in the apache2 config file. But everytime I ...
0
votes
0answers
23 views

Apache mod_security crs blocking PDF files

I've just installed CRS for Apache mod_security and it's reporting all PDF files as possible attacks. Specificaly, it's the 'modsecurity_crs_20_protocol_violations.conf' that's causing the trouble ...
0
votes
0answers
50 views

mod_security: another rule with same ID

I have installed httpd 2.2.15 on CentOS 6.5 (minimal installation with no cPanel) with modsecurity 2.8. When I am starting httpd I am getting this error: Starting httpd: Syntax error on line 23 of ...
0
votes
1answer
58 views

Blocking request with query string

I'm an under a DDoS attack though I have cloud flare.. I found out that the attacker is accessing the server using query strings "?a=randomnumber" I don't use query strings in my website so I need ...
0
votes
0answers
65 views

mod_security2 rules for WordPress

Are there any standard (?!) mod_security2 rules for servers with WordPress websites? I want to make clear that I do not want to disable mod_security2 (it exists for a good reason). I just want to make ...
0
votes
0answers
139 views

What advantages does mod_evasive have over mod_security2 in terms of DDOS protection?

I'm running an Apache2 server in front of a Tomcat and I need to implement a DDoS protection mechanism on the Apache2 layer. I have two candidates: mod_evasive and mod_security2 with the OWASP core ...
0
votes
1answer
320 views

modsecurity whitelist to allow file downloads?

I have a site that has modsecurity enabled but I am receiving 403 Forbidden when trying to access PDF documents on the server through the web site. Is there a way to whitelist pdf files to allowed to ...
0
votes
1answer
426 views

How do I include a rule set with ModSecurity on IIS?

I'm using ModSecurity 2.7.1 on IIS 7.5 / Windows 2008 R2. I've reference my base set up conf file in my Web.Staging.config of a site like so: <ModSecurity enabled="true" ...
1
vote
1answer
232 views

Does ModSecurity 2.7.1 work with ASP.NET MVC 3?

I'm trying to get ModSecurity 2.7.1 to work with an ASP.NET MVC 3 website. The installation ran without errors and looking at the event log, ModSecurity is starting up successfully. I am using the ...
1
vote
1answer
355 views

What do the audit log records for ModSecurity actually mean?

We have ModSecurity setup to log to modsec_audit.log for Apache2. Today we have had 2259 entries created in this log with a referrer of: Mozilla/5.0 (compatible; bingbot/2.0; ...
3
votes
1answer
654 views

modsecurity: block ips, that visited 404 pages more than 10 times in a minute

we're using mod_security and we have currently issues with some bots. i would like to block ips, that visited 404 pages more than 10 times in a minute. How can this be done? How can i poll the 404 ...
-1
votes
2answers
281 views

block php file access (modsecurity)

How can I block all access to a PHP file? File name is similar to sm6######.php where #### can be any random digit. How can I do it using mod_sec?
0
votes
1answer
109 views

How to debug modsecurity_audit_log

I was accessing www.example.com/RestAPI/index.php/tweets.json in my server. The modsec_audit.log showed the following error, but there is no related errors/warnings in modsec_debug.log. I could see ...
0
votes
0answers
671 views

What causes a declaration of “charset=utf-8” to not work?

I'm getting a Modsecurity warning that I think is a false alarm but maybe I'm not understanding what I'm looking at. Here is the log: ModSecurity: Warning. Pattern match "(?i:^text/html;?$)" at ...
0
votes
2answers
154 views

Apache2 “Deny from all” directive in 'security' section stops access in Virtual Host sections

I have the following two sections in my agache2.conf file. <Directory /> Options FollowSymLinks +Indexes AllowOverride None Order allow,deny Deny from all </Directory> ...
1
vote
1answer
569 views

how to control apache mod-security for IP-address

i have mod security installed on my server. it is working for all IPs now,,, i need to EXCLUDE specific IPs from applying this mod-security how can i do so? is there a way to control it using apache? ...
0
votes
1answer
4k views

how i can know which version of mod security that i had on the server? and how i can update it?

greetings .. i'm using cpanel (11.25 Stable 46156) with mod security installed , how i can i know the of mod security that installed in the server. second how i can update mod security manually or ...
3
votes
2answers
2k views

Why does modsecurity require Content-Length in POST requests?

I have a RESTful web service that accepts a POST request to a resource without an entity body, e.g. an empty POST request. The default modsecurity configuration requires that all POST requests have a ...
0
votes
2answers
251 views

ModSecurity Error Entries

Recently, I was passed some error logs to take a look into, since we'd had some network spikes recently. However, I've never worked with modsecurity (I'm a programmer just doing this since we don't ...
3
votes
1answer
5k views

Disable modsecurity For a Specific Directory

How do you disable modsecurity for just a specific directory. I'm getting errors in phpMyAdmin that are caused by modsecurity tripping based on rules. I have the following files set up: # ...