rregister

  • Total activity 16
  • Last activity
  • Member since
  • Following 0 users
  • Followed by 0 users
  • Votes 0
  • Subscriptions 4

Comments

Recent activity by rregister Recent activity Votes
    1. Community
    2. Web Servers & Applications
    3. Compression not working

    Could you open a support ticket using the link in my signature so we can take a closer look? You can post the ticket number here so we can update this thread with the outcome. Thank you. Thanks f...

    1. Community
    2. Web Servers & Applications
    3. Compression not working

    Hello, You can use the following command after uploading a test file to the domain name to verify if the content is compressed: curl -v --compressed http://www.test.domain/test.html Could you ru...

    1. Community
    2. Security
    3. Custom rule not being blocked in CSF

    I use... #Block WP logins with no referring URL SecRule REQUEST_METHOD "POST" "deny,status:401,id:5000130,chain,msg:'wp-login request blocked, no referer'" SecRule &HTTP_REFERER "@eq 0" Are yo...

    1. Community
    2. Security
    3. Infected Wordpress website

    Couple of tips from a wordpress server admin. As someone above mentioned, watch out for old versions of Revslider - I believe it's versions pre 4.6 that are dangerous. I believe the Yoast SEO and ...

    1. Community
    2. Security
    3. wp-login.php and mod security

    Can you humor me and check the ownership of the ip.dir and ip.pag files? That could help indicate if RUID2 is causing an issue. Also have you tried tailing the apache error log while you attempt to...

    1. Community
    2. Security
    3. wp-login.php and mod security

    That's odd. I'm using the same apache and modsecurity versions and the rule is still working fine. Are you adding the rules yourself to modsec2.user.conf and restarting apache after? Are you addin...

    1. Community
    2. Security
    3. wp-login.php and mod security

    Just an update - I still can't get the blocking to work on repeated failed login attempts (with referer). I've now tried it on VPS servers with 3 different hosting companies, all of which are using...

    1. Community
    2. Security
    3. wp-login.php and mod security

    Without access to the server itself to check logs and use debug settings it would be hard for me to fix that. Humor me though... in the site's .htaccess, add this line: ErrorDocument 401 default ...

    1. Community
    2. Security
    3. wp-login.php and mod security

    things: You should only need to initialize the collection once (initcol). Try commenting out the 2nd instance of SecAction phase:1,nolog,pass,initcol{snip}, restart apache, and see if that helps...

    1. Community
    2. Security
    3. wp-login.php and mod security

    I'm having a bit of trouble with this and would appreciate any help you have to offer, though I'm using apache 2.4 and not litespeed. My understanding is that it should work the same...apologies if...