Atomicorp

I see this at the top of my modsec config in WHM # ModSecurity whitelist file Include /usr/local/apache/conf/modsec2.whitelist.conf and this also in my modsec plugin control http://www.sportsmanfishing.com/images/ScreenHunter_04-Apr.-20-16.14.gif Doesn't this mean it is set up properly? you can also...

ASL will install everything for you, the real time rules only package is something you have to install yourself. Or, if you want us to install it, the service fee is $59 for a standards based system, and $99 for a custom system (this does not include the license fees for either product, which is se...

Sorry I meant the 199.95 package. I saw the reference to the real time rule 99/yr package but it didn't explain whether you installed the rules or I had to so I assumed I had to. Never found the real time rule 59/yr package. Doesn't mean it isn't there however, I could just be skimming over it as I ...

Again thanks for your reply, however after reading through the documentation I don't feel comfortable trying to install the real time rules myself and I don't want to mess anything up. It looks like you don't provide an installation service other than one for 299 dollars and seeing how this isn't a ...

Thanks for your reply. I just disabled the rule id as it seems to be creating a lot of false positives. Unfortunately I paid someone to install modsecurity and the delayed rules because I'm a web designer just learning how to manage my own dedicated server and as you probably already know it's no ea...

Hi all, I am new to using modsecurity v 2.6.3 and the delayed ruleset so please bare with me. I am seeing this in my logs: 2012-04-19 08:31:38 66.249.67.198 /clickmanager/clickmanager.cgi?dl=http://www.guidesforhire.com HTTP/1.1 www.mywebsite.com Access denied with code 403 (phase 2). Match of "...

Keep in mind you are only inspecting POST ARGS so only a POST will trigger this rule.

Just actually picked up on this statement of yours. Does this mean that the rule won't look for subject text in email messages? Is this more geared towards blogs and forums?

Actually I've read through that link also and liked what I read. However, I already have the config server package installed on my server and just need to upgrade the mod security to 2.6 as per the instructions to use asl lite. I had a look at easy apache but it doesn't look like 2.6 is an option. W...

I was testing it by reading my mod security logs after seeing multiple spam messages in my Mailwatch/Mailscanner program with the subject text I've blacklisted. There were no logs so I assumed it wasn't working. Thanks for the link I've seen it before in my browsing and it was a bit confusing. As yo...

No I added it to the WHM/Plugins/Mod Security/Edit Config. See screenshot. I whited out the domain/ip details.

Looked through a lot of posts in this forum and learned a few things I didn't know before. :D Not sure if this is the appropriate thread for my question but here it goes: I have a rule created for me by a third party that states: # post content phrase match - catch pills, pron etc SecRule ARGS_POST ...