ModSecurity supplies an array of request and response filtering rules and other security features to the Apache HTTP Server. ModSecurity is an open source web application layer firewall.
Questions tagged [mod-security]
334 questions
2
votes
2 answers
how I can know which version of mod security that I had on the server? and how I can update it?
I'm using cpanel (11.25 Stable 46156) with mod security installed. How can I know the version of mod security that installed in the server?
How can I update mod security manually or make it update automatically ?
![](../../users/profiles/22607.webp)
Libyano
- 141
- 2
- 2
- 8
2
votes
3 answers
How do I remove the ServerSignature added by mod_fcgid?
I'm running Mod_Security and I'm using the SecServerSignature to customize the Server header that Apache returns. This part works fine, however I'm also running mod_fcgid which appends "mod_fcgid/2.3.5" to the header.
Is there any way I can turn…
![](../../users/profiles/37204.webp)
matthew
- 1,309
- 1
- 11
- 21
2
votes
1 answer
How to disable mod_security2 rule (false positive) for one domain on centos 5
Hi I have mod_security enabled on a centos5 server and one of the rules is keeping a user from posting some text on a form. The text is legitimate but it has the words 'create' and an html tag later in it so it is causing a false…
![](../../users/profiles/62043.webp)
nicholas.alipaz
- 155
- 2
- 7
2
votes
2 answers
Necesity of ModSecurity if Apache is behind Nginx
I have my Apache installed behind Nginx. So every request that comes in is first handeled by Nginx. If there is dynamic content needed the request is send to Apache which listens on port 8080.
Pretty basic reverse proxy setup.
Now with this setup…
![](../../users/profiles/26204.webp)
Saif Bechan
- 10,892
- 10
- 40
- 63
2
votes
0 answers
Efficient and comfortable mod_security monitoring with sentry.io or similar tools?
When using mod_security one might drown in error reports.
sentry is a comfortable tool to monitor software errors, sort them, ignore unimportant ones and so on.
I was wondering if it is possible to connect mod_security with sentry.io?
The only…
![](../../users/profiles/48782.webp)
Alex
- 476
- 13
- 35
2
votes
0 answers
How to make mod_remoteip and mod_evasive work together
I have several Cento7 machines running Apache 2.4. They are behind a load balancer. The load balancer pass X-Forwarded-For header with client IP. In order to have mod_evasive to use the real client IP, I enabled mod_remoteip.
Here is my config for…
![](../../users/profiles/583829.webp)
user3908406
- 143
- 1
- 4
2
votes
2 answers
mod_security 403 forbidden response is returning homepage content with WordPress mod_rewrite
I'm using mod_security on various websites, some WordPress and some not.
I notice that on a non WordPress website the following:
https://test-site.com/?exec=/bin/bash
returns a 403 forbidden error code, along with the Apache "forbidden" error page.…
![](../../users/profiles/187755.webp)
MrCarrot
- 345
- 1
- 4
- 13
2
votes
5 answers
500 Internal Server Error when adding a line in the .htaccess file
I need to add the following line into my .htaccess file in order to get my website working with mod_security
SecFilterScanPOST Off
but then I get an error
Internal Server Error
The server encountered an internal error or misconfiguration and was…
![](../../users/profiles/18131.webp)
Elitmiar
- 775
- 3
- 15
- 31
1
vote
0 answers
mod_security does not block invalid URI requests
I am quite new to Modsecurity and need some help to secure my development server.
I have Apache 2.4 installed with Mod Security 2.8.0
I have also installed OWASP ModSecurity Core Rule Set ver.3.2.0
Now, I am trying to block all requests that do not…
![](../../users/profiles/541109.webp)
user3132858
- 143
- 2
- 6
1
vote
1 answer
Apache - Custom error page returning error AH01071 only for file requests
I have a site hosted with a shared hosting provider. It is an Apache with FPM/FastCGI and PHP 7.2
Being shared hosting, the only configuration I have access to is htaccess, but obviously not any of the Apache conf files.
I have a custom error page…
![](../../users/profiles/46435.webp)
Nicolas
- 201
- 1
- 3
- 8
1
vote
1 answer
Modsecurity - entire web pages being posted to log
I am running the latest version of Modsecurity on Ubuntu 18.04 and I'm having an odd problem that I cannot find through searching.
The problem is that certain visitors to my server are posting the entire contents of web pages to the log. The posts…
![](../../users/profiles/512701.webp)
User6655
- 11
- 5
1
vote
1 answer
Can I setup redirects with Modsec?
The web servers I managed are all running Apache 2.4 with Modsec. Is it possible to write a rule that will serve up a different page if matched by Modsec? I want this to be independent of the domain.
For example, if domain1.com/login or…
![](../../users/profiles/371276.webp)
dstana
- 285
- 1
- 10
1
vote
2 answers
ModSecurity SecRule based on original browser url, not internal rewrite (index.php, app.php, etc.)
I'm working on a Symfony 2 site, and am trying to create a ModSecurity rule to match a particular browser URL. IE example.com/results
Symfony 2 internally rewrites all requests to app.php using rules in .htaccess, so when I check REQUEST_URI in the…
![](../../users/profiles/160130.webp)
Nathan Stretch
- 171
- 1
- 15
1
vote
2 answers
How to use modsecurity with lighttpd
I'm not an expert and I'm looking to use modsecurity with lighttpd
Can someone explain me how to compile or install modsecurity for lighttpd because I can't find any documentation online
![](../../users/profiles/476519.webp)
freeze
- 11
- 1
1
vote
1 answer
ModSecurity: setenv within SecAction not effective
I am trying to debug an issue with ModSecurity. Using ModSecurity 2.9.2 on Apache 2.4.33. I've simplified the situation as far as possible, but have run into a wall. I'm working within a virtualhost config. Here's what I'm trying to do:
SecAction…
![](../../users/profiles/160130.webp)
Nathan Stretch
- 171
- 1
- 15