Page 1 of 1

BUG: ModSecurity kills posting in this forum?!

Posted: Sat Apr 25, 2020 8:45 am
by Azurel
Hi, I tried multiple times to submit a new topic about ModSecurity with a example-line from a error_log and this forum/server ban me for few hours. Thats very strange!

I have upload the line as txt-file https://file.io/rzn7ssaO
I use CentOS 7.7 with Plesk Obsidian 18.0.26 and have in error_log this entries:

See linked file

Without the query string, however, this is not very helpful to be able to look up what the attack was or even to be able to change some of your parameters because false positive.
Is there a setting to add query string behind [uri ...]?

Re: BUG: ModSecurity kills posting in this forum?!

Posted: Sat May 02, 2020 4:38 pm
by mikeshinn
It looks like youre using the unsupported free rules, is that correct?

Re: BUG: ModSecurity kills posting in this forum?!

Posted: Sun May 03, 2020 11:20 am
by Azurel
Yes I test modsecurity currently with comodo and atomicorp free rules set. Have the atomicorp subscription version more information in logfiles? Can you show me a example, please? ;)

Re: BUG: ModSecurity kills posting in this forum?!

Posted: Mon May 04, 2020 12:39 pm
by mikeshinn
Certainly, the supported rules provide a lot more information and support is provided for any issues the same day the issue is reported, updates for false positives for example are provided the same day they are reported, our goal is provide any update within an hour.