fuzzylogic
- Total activity 235
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 0
- Subscriptions 81
Comments
Recent activity by fuzzylogic-
Do you have mod_headers installed in easyapache4? htaccess "Header set" won't work without it.
-
That email alert tells you that php running in myuser's account made a connection to 94.130.70.19 on port 21. Port 21 is typically for ftp connections That ip is located in Ukraine. - Removed - ph...
-
I had a problem with similar symptoms about a week ago. I noticed it when calls to WordPress update server (also wget https) were failing with the same error. While I cant say exactly how the issue...
-
Here is another temporary rule so you can see if you have succeeded. Replace the XXXs with your home computer ip address so the rule only fires for your requests. Add this rule through the WHM Inte...
-
In that CRS rule set (the older of the 2 supplied by cPanel), the HIGH_RISK_COUNTRY_CODES is set on... line 194 of OWASP/modsecurity_crs_10_setup.conf It is set by the line... SecAction "id:'900022...
-
So as to persist through updates of the rule sets the best way is not to edit them directly but to find the id of the rule you want to edit then copy the rule, change its id then add it back as a n...
-
Have you had a look at the Response code (in Firefox firebug or Chrome Developer tools) for the second request of that page load? Or is the 2nd request even being made? Here are the 2 requests made...
-
The request uri for the 2nd request is /cpsessxxxxxxxxxx/frontend/paper_lantern/security/tls_status/views/view_domains.html.tt which looks fairly safe to pass through most rule sets. the response h...
-
Maybe have a look at your Modsecurity Hits List at... WHM Home " Security Center " ModSecurity" Tools " Hits List then search for the phrase tls_status to see if there are any corresponding rule hi...
-
The most important ways I use it as by the 2 methods CXS uses it as I described in the other post. These use an immediate or pro-active type of blocking/quarantine action. I also have the ClamAV p...