Liquidweb says your exclusion rules are not correct.

Hello again,

Chris found the password he had changed it to again and updated billing back to that so I am able to log in again.

The LocationMatch you set up needs to be modified, I believe it needs to be changed to this:

<LocationMatch /*>
SecRuleRemoveById 300016
SecRuleRemoveById 300015
</LocationMatch>

Please let me know if you would like us to do this for you, apache will need to be restarted afterwords.

Sincerely,

---------
Michael Wineland
System Administrator
Liquidweb Inc.

Why? I need a technical explanation, because AFAIK the current setup is working without issue.

This is a cpanel server it does use modsec2. the current script when it writes the exclusions were not being honored. I contacted Liquidweb and they evaluated your conf files and made corrections. They now work but not when your script updates them in a cpanel environment?

We're not able to recreate any problems with the way cmc writes the configuration files for ModSecurity v2+ so won't be changing anything without a technical explanation of any issues you have have had.