Tag Info

New answers tagged

0

There is a slash missing in your Redirect directive: <VirtualHost *:443> DocumentRoot "/var/www/keypad" ServerName keypad.io SSLOptions +StrictRequire <Directory /> SSLRequireSSL </Directory> SSLProtocol -all +TLSv1 +SSLv3 SSLEngine on SSLCertificateFile /cert/cert.crt SSLCertificateKeyFile ...


0

After extensive trial & error I still don't have a perfectly satisfying solution, but at least a workaround. Adding SecRemoveRuleById inside <Directory>-Blocks prevents entries in the error log - but it does not seem to work for all rules, only for some of them (for example, deactivating rule id 960010 works, but 960243 & 960257 do not). This ...


1

The OWASP rule set has been upgraded to require modsecurity >= 2.7. There is a downgrade script in the util/rule-management folder that can automatically downgrade rulesets to be 2.6 compatible. To downgrade your activated rules just run this comand in the rule directory (requires perl): perl ...



Top 50 recent answers are included