Atomicorp

Hi Michael, Thanks for the information, but the rule is triggered when we or our customers simply use our CMS to save data to the database. The URL will look something like this: http://www.domainname.tld/index.php?config=edit&save=1 And unless I'm reading the rule wrong (which is highly possibl...

Hello. Recently we are seeing the following rule getting triggered by our software and it hasn't happended before in the past. [Fri Feb 03 15:22:09 2012] [error] [client 208.180.nn.nnn] ModSecurity: Access denied with code 403 (phase 2). Pattern match "((ht|f)tps?:/|\\\\.\\\\./\\\\.\\\\.)"...

Thanks Michael,

That cleared up a lot

Regards,
Peter

whitelist.txt is not used by the rules. Its used by some special functions in ASL. Thanks Mike, Isn't it also used within cPanel? That's where I'm using it. and I seem to remember somewhere in the documentation (and this may have changed since then) something like this: gotroot.com rule 00_asl_whit...

So I just updated my rules with last months free/delayed rule set. My whitelist.txt file used to be empty and now suddenly has the following: .google.com 127.0.0.1 owned-nets.blogspot.com .progllc.com .atomicorp.com .gotroot.com pastebin.com pastie.org goo.gl bit.ly doiop.com tinyurl.com readthisurl...