Preguntas Frecuentes - FAQ

ModSecurity™ Configuration Imprimir éste Artículo

Overview:

This interface allows you to configure ModSecurity’s global settings.

Note:

The system loads the /etc/apache2/conf.d/modsec2.user.conf file as an include.

In previous versions of cPanel & WHM, EasyApache used this file as the default ruleset.
This file’s rules may still affect the way in which ModSecurity functions, which may result in false positives on your system.
If you see many false positives, check this file for custom rules.

Configure Global Directives

Note:

For more information about a setting or directive, click the directive name.
After you make the desired changes, click Save at the bottom of the interface.

In this interface, you can configure the following settings:

Setting	Directive	Description
Audit Log Level	SecAuditEngine	This setting determines how the audit engine logs transactions. You can choose from the following options: Only log noteworthy transactions. Do not log any transactions. Log all transactions. Warning: We strongly recommend that you do not select this option. This option causes Apache to log every transaction, including your users’ and clients’ private data. The resulting log files will fill your system’s partitions quickly. Use this option only to debug your server.
Connections Engine	SecConnEngine	This setting determines how the connections engine processes rules. You can choose from the following options: Process the rules. Do not process the rules. Process the rules in verbose mode, but do not execute disruptive actions.
Rules Engine	SecRuleEngine	This setting determines how the rules engine processes rules. You can choose from the following options: Process the rules. Do not process the rules. Process the rules in verbose mode, but do not execute disruptive actions.
Backend Compression	SecDisableBackendCompression	This setting enables or disables backend compression, but does not affect frontend compression. This setting defaults to Enabled.
Geolocation Database	SecGeoLookupDb	This setting allows you to specify the geolocation database’s path. Enter the desired path in the Geolocation Database text box.
Google Safe Browsing Database	SecGsbLookupDb	This setting allows you to specify the Google Safe Browsing™ Database’s path. Enter the desired path in the Google Safe Browsing Database text box.
Guardian Log	SecGuardianLog	This setting allows you to pipe transaction log information to an external application for additional analysis. Enter the path to the desired application in the Guardian Log text box.
Project Honey Pot Http:BL API Key	SecHttpBlKey	This setting allows you to supply a Project Honey Pot API Key to use with the `@rbl` operator. Enter the API key in the Project Honey Pot Http:BL API Key text box.
Perl Compatible Regular Expressions Library Match Limit	SecPcreMatchLimit	This setting determines the match limit for the PCRE library. This setting defaults to `1500`.
Perl Compatible Regular Expressions Library Match Limit Recursion	SecPcreMatchLimitRecursion	This setting determines the match limit recursion for the PCRE library. This setting defaults to `1500`.

Artículos Relacionados

Apache mod_userdir Tweak
Overview: This interface allows you to disable the Apache mod_userdir module’s functionality for...

Compiler Access
Overview: This interface lets you manage your server’s C and C++ compiler user access. This can...

Configure Security Policies
Overview: The Configure Security Policies interface allows you to configure your security policy...

cPHulk Brute Force Protection
Overview: This interface allows you to configure cPHulk, a service that provides protection for...

Host Access Control
Overview: Warning: For users of CentOS 7, CloudLinux™ 7, and Red Hat® Enterprise Linux® 7 and...