Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [mod-security]

The tag has no usage guidance.

3
votes
1answer
272 views

Request Missing a User Agent Header

I activated ModSecurity on a cheap web hosting but I have no control over it: that is, the only thing the service provider lets you do is reading logs but, unfortunately, you can't really configure ...
1
vote
1answer
57 views

how can file content affect whether its uploading gets a 403 error

I use ajax (POST) in javascript to send text data to be saved as a file on the server by a php program (which simply does an fopen, fwrite and fclose). This generally works OK. However recently I ...
1
vote
1answer
261 views

Handling requests to server's IP address

I have an Apache Web Server running some virtual hosts, site1.com and site2.com. What do I do with requests to the server's IP address? Is it safe to allow requests by IP or do I need block, ...
4
votes
0answers
239 views

Why am I seeing “*QUERYSTRINGPII_REMOVED*” in the query string of a lot of requests

I regularly see URIs like the following that contain *QUERYSTRINGPII_REMOVED* and the IDS blows them away without further examination. I could just allow the asterisk character but it isn't legitimate ...
8
votes
0answers
341 views

Installing Comodo software on an Apache-based Modsecurity module [closed]

I am very new to the VPS world and I want to install Modsecurity on my new VPS (Ubuntu 16, Apache, Webmin) after getting many recommendations to do so (already installed CSF-LFD but had many voices to ...
6
votes
1answer
322 views

Block IP requesting xmlrpc.php

We have a firewall with modsecurity installed. I would like to write a rule to block any IP address for 24 hours if that IP requests xmlrpc.php. Please note that we do not use WordPress on our ...
1
vote
0answers
724 views

rotating mod_security logs with rotatelog

I would like to rotate mod_security logs with rotatelogs, as this does not need a restart of the httpd, like logrotate does. However, it seems like mod_security does not want to work together with ...
2
votes
2answers
143 views

Prevent request via IP address of server

I'm pretty sure there's a way to prevent access to a website through the server IP address and to force the user to enter the domain name instead. so that http://156.56.75.87 should trigger a 403 and ...
1
vote
2answers
441 views

Filtering content from response body HTML (mod_security or other WAFs)

We have Apache on Linux with mod_security as the Web App Firewall (WAF) layer. To prevent content injections, we have some rules that basically disable a page containing some text patterns from ...
1
vote
0answers
42 views

Regex isn't honored in mod_security2

SecRule REQUEST_URI "^/(|(.*)/)(lpt1|lpt2|lpt3|lpt4)(/|\.|\?|$)" "t:none,t:htmlEntityDecode,t:lowercase,t:removeWhitespace,block,msg:'X',id:'1000'" SecRule REQUEST_URI "^(.*)//(.*)$" "t:none,t:...