ConfigServer Community Forum

For some reason, the main rule disabled list isn't being applied to new hosting accounts on the server, at least two now. I've had to copy the disable list and add it to the user whitelist. Chirpy had set the server up a week or so ago.

Not sure I know why, I've seen it on a couple other servers also, no problems with some of the sites, but, on a few the disabled rules aren't being disabled for just a few sites.

Anyone run into this and/or have any possible solutions?

Try moving the modsec2.whitelist.conf Include line to the bottom of /usr/local/apache/conf/modsec2.user.conf and then restart httpd.

I'll try that, thanks!!

That seemed to have worked!