ModSecurity issues since 11.48

mitk

• March 10, 2015 20:44

So i upgraded and setup my vendors to be with the OWASP ModSecurity Core Rule Set but now i am getting a lot of reports of issues, people not being able to login to joomla admin or people getting banned for just trying to login to a backend once. Anyone having any issues?

• 

  mitk

  • March 11, 2015 01:49

  Here is an example of an IP banned that was just trying to view a new photo gallery Time: Tue Mar 10 19:28:43 2015 -0400 IP: 71.000.000.143 (Blah) Failures: 5 (mod_security) Interval: 3600 seconds Blocked: Permanent Block Log entries: - Removed Output No Need Here -

  0
• 

  Infopro

  • March 11, 2015 02:05

  I've removed that output, no need here. If you do a search on the forums you'll find a few threads discussing these issues and there are suggestions on how to disable, and report, rules affecting your sites. Here's one of those:

  0
• 

  mitk

  • March 11, 2015 04:36

  thank you

  0
• 

  Infopro

  • March 11, 2015 09:05

  You're certainly welcome. :)

  0

Please sign in to leave a comment.