Hello,

I am having some issues with mod_security in one of my cPanel accounts. I need some help to disable it just for that account.

Could anyone explain me how to do it?

Thanks!

I have this and lots of other CFS scripts installed on several servers. On one, tool has disappeared. The link is still in the menu, but when I click on it. I just get a blank page.

Any thoughts? Should I just try reinstalling it? Found this on the an old forum post:

wget
tar -xzf cxsinstaller.tgz
perl cxsinstaller.pl
rm -fv cxsinstaller.*

HI, can you maybe tell me in what file I can add these rules to white list them:

I need this because to much false positive and it is really problematic for clients.

Hi i currently have my mod security set to Strict Configurations Off on the server.

I have installed the cms but how do i set the same using cmc?
And what section in the script do i use to set the strict to off?
Is there a guide for this?

Thanks so much,
Dave :)

Hi,

I am getting this in the modsec log;

---
collections_remove_stale: Failed to access DBM file /var/cpanel/secdatadir/ip : Permission denied
---

Any advice?

/Tommy

Hi to all,

Im new, I have an ecommerce for babies gifts.

I have a doub, my server is shared, I don't know how install pagespeed module in that type of server. It's posible?

I talk with my service provider but it tells me that it does not have it installed

And if you can not, from when is it advisable to have our own systems? and what is the cost of an average server?

Thanks in...

Hello,

We have some security rules deactivated in ConfigServer ModSec Control . The problem is that even with the rules disabled there are still clients being blocked in our firewall because of them.

The rules are: 970901 and 981205

In our logs:

ModSecurity: Access denied with code 403 (phase 4). Pattern match ^5\\\\d{2}$ at RESPONSE_STATUS.

ModSecurity: Warning. Operator GE...

Hi.
Thanks for the time-saver.
We have been using it.
However, since we upgraded to v66, CMC U is blank.
Please is there any ETA for an update?
Thanks!!

Dear Configserver,

I plan to upgrade my EA3 to EA4, may i know is it current cmc supported EA4?

TQ

One of our clients reported an issue with loading their domain. On checking we could see a mod security rule (ID: id 1234123413 ) has been triggered and which caused the issue. We have then whitelisted the rule in the server, but upon checking we could see that the rule was not whitelisted properly and triggered again.

Logs shown in apache error logs are.

-------------------
ModSecurity:...

Hello good to have everything complete with this me vale ??? CPanel Service Package
+ MailScanner Front-End
Or those of scan viruses are apart and the mail ???

After uninstalling, and reinstalling to 2.09, the WHM UI will not load.

We see stuck process

root 160020 0.5 0.0 56884 16860 ? S 11:22 0:00 | \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/configserver/cmc.cgi

we straced this process from a few milliseconds after it was created, and it stops in the same place every time

11:22:47.342042 stat(...

11.46 adds ModSecurity features to WHM/cPanel which on the face of it seems like a great thing but is it?

Does it conflict with ConfigServer's ModSecurity Control?

I am using joomla and the modsec system keeps blocking a certain person from uploading stories to joomla.

Is there a way to whitelist the ip address for that user in modsec?

Regards
Tim.

Hello,

It seems the plugin after installed by cPanel Server Service, without any of my interference does not display or read the logs, it display this error.

ConfigServer ModSecurity Control - cmc v2.01

Displaying logs from /etc/apache2/logs/modsec_audit/

No entries found in /etc/apache2/logs/modsec_audit.log

root@panel # stat /etc/apache2/logs/modsec_audit.log
File:...

Hello,

I have issue with CMC. when IN CMC I amd doing whitelist rule for any domain it is wnot working.

For example in mod security I have make rule for block china. but when for one I am white-listing that rule in CMC it is not working. can you please update what can be cause ?

Hi,

We run a performance server for our clients who use Magento mainly and Zen Cart. The problem we keep having is our clients are getting blocked when out of the office.

Magento CSF

Time: Wed May 25 14:34:35 2016 -0400
IP: 24.56.254.30 (US/United States/c-24-56-254-30.customer.broadstripe.net)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block (IP match in...

Had to replace a hard drive in my server and kept the old one mounted for reference. Would like to transfer over my previous whitelisted rule id's for each domain that I created on the old drive but cannot seem to find the right files. Anyone point me in the right direction?

Hi,
I am seeing that since cPanel added the Mod_Security tools, the CMC option to set one domain with rules off is no longer working.

Is this an incompatibility?

Also, since cPanel added the Mod_Security option, the files ip.dir and ip.pag
are growing so huge that CMC now is showing the following error:
collections_remove_stale: Failed deleting collection (name ip , key xx.xx.xx.xx ):...

Hi,

i find some people recommend comodo,
but i feel their updating speed is not as quick as i expect.
do you use which rule to protect your sites ?