Modsecurity: Excessive false positives - Stack Overflow
Nov 30, 2015 · I've just set up Apache modsecurity on a server, and in principle it works well, but I am getting rather a lot of false positives. I'm using the OWASP ModSecurity Core Rule Set (CRS), …
ModSecurity: Access denied with code 403 (phase 2). Pattern match ...
Jun 28, 2023 · Not the first one with ModSecurity: Access denied with code 403 (phase 2).... issues. But the thing is, I have a server, multiple websites, multiple webmail users and nobody is having any …
owasp - Cannot resolve Request Header Issue in ModSecurity and its ...
Mar 27, 2022 · B) As you can see, I have installed the necessary modules/software, as both ModSecurity - and the new Modsecurity-CRS is being called on. [Mon Mar 28 17:39:04.510608 …
Rate limit on a per-IP basis using ModSecurity - Stack Overflow
Nov 6, 2023 · OWASP ModSecurity Core Rule Set Dev on Duty reporting. Ordinarily, I would recommend definitely not to attempt to implement any sort of rate limiting logic inside ModSecurity. …
How do I create a rule to block all user agents with ModSecurity V3?
May 13, 2022 · I want to add a custom ModSecurity (V3) rule that can block all user agents, and allow me to whitelist certain User Agents from a file. If this is possible, if someone could share the rule with …
nginx ingress - ModSecurity (in DetectionOnly mode) is not giving ...
Feb 16, 2021 · I have configured modsecurity-nginx connector on Kubernetes Nginx Controller. Currently, my objective to use ModSecurity WAF is to implemented in DetectionOnly mode as I don't …
How can I disable mod_security in .htaccess file? - Stack Overflow
Oct 17, 2012 · How can we disable mod_security by using .htaccess file on Apache server? I am using WordPress on my personal domain and posting a post which content has some code block and as …
ModSecurity maximum post limits (PCRE limit errors)
The default values for the PCRE Match limit are very, very low with ModSecurity. You can got to 500K usually without harming your set. But for your information: The PCRE Match limit is meant to reduce …
How to configuration Modsecurity logs? - Stack Overflow
Jan 24, 2022 · How to configuration Modsecurity logs? Ask Question Asked 4 years, 2 months ago Modified 4 years, 2 months ago
ModSecurity blocks after despite rule exclusions - Stack Overflow
Jun 24, 2024 · ModSecurity blocks after despite rule exclusions Asked 1 year, 9 months ago Modified 1 year, 9 months ago Viewed 539 times