How To Report ModSecurity Rules

Introduction

This article aims to provide guidance on reporting ModSecurity rules.

Procedure

If you find a problem with a vendor’s rule, perform the following steps to report the issue to the rule’s vendor:

Please note that this option will not appear if the vendor does not accept reports. During step 4, you can also check the option to disable the rule and deploy and restart Apache.

1. Log into WHM and navigate to "Security Center / ModSecurity™ Tools".

2. Locate the hit that the rule generated in the Hits List and click More.

3. Click "Report" this hit.

4. Enter your email address, the reason for the report, and any additional comments for the vendor.

5. Click "Review Report".

6. Verify the information in your report and click "Submit".

Additional Resources

ModSecurity Tools