Modsecurity: Excessive false positives - Stack Overflow
Nov 30, 2015 · I've just set up Apache modsecurity on a server, and in principle it works well, but I am getting rather a lot of false positives. I'm using the OWASP ModSecurity Core Rule Set …
ModSecurity: Access denied with code 403 (phase 2). Pattern …
Jun 28, 2023 · Not the first one with ModSecurity: Access denied with code 403 (phase 2).... issues. But the thing is, I have a server, multiple websites, multiple webmail users and nobody …
ModSecurity False Positive SQL Injection - Stack Overflow
Jul 14, 2020 · So I was able to wrangle several other ModSecurity rules giving false positives for other situations but I'm having issues with this specific ruleset. When customers submit a form …
How can I disable mod_security in .htaccess file? - Stack Overflow
Oct 17, 2012 · How can we disable mod_security by using .htaccess file on Apache server? I am using WordPress on my personal domain and posting a post which content has some code …
How can I increase the SecRequestBodyLimit for a single route?
Aug 10, 2023 · 3 I'm using ModSecurity as WAF on my Apache 2 server. Everything works so fine; just when I post bigger JSON data to a special route will the WAF reject my request since …
ModSecurity + Fail2Ban ban client IP sending post to Servlet
Oct 1, 2016 · And I have a servlet on worker1. In Plesk, ModSecurity is set to "On" and uses Free ModSecurity Rules from Comodo. IP Address Banning (Fail2Ban) intrusion detection is "On". …
mod security - Install modsecurity on nginx - Stack Overflow
According to the official documentation: The extensibility model of the nginx server does not include dynamically loaded modules, thus ModSecurity must be compiled with the source code …
Apache error 500 on large file uploads (mod_security)
The fact you have a ModSecurity alert means that you can't have empty activated_rules folder or you are including the rules in some other way. There are known problems with ModSecurity for …
ModSecurity maximum post limits (PCRE limit errors)
The default values for the PCRE Match limit are very, very low with ModSecurity. You can got to 500K usually without harming your set. But for your information: The PCRE Match limit is …
nginx - ModSecurity WAF log configuration - Stack Overflow
Apr 17, 2024 · Are you sure Modsecurity is running, I don't see a SecRuleEngine On. Also, you need to remove SecRuleRemoveById 949110 as this is an important rule ID and is necessary …