[mod-security-users] webmin server sensors

[Kassidy C. <kp...@ru...>]

Hey everybody,

I just recently installed mod_security following a tutorial and using
these rule files:

/wget http://www.modsecurity.org/download/rules/modsecurity- general.conf/

/wget http://www.modsecurity.org/download/rules/modsecurity- php.conf/

/wget http://www.modsecurity.org/download/rules/modsecurity- output.conf/

/wget http://www.gotroot.com/downloads/ftp/mod_security/apache2/
apache2-gotrootrules-latest.tar.gz/

/tar -xvzf apache2-gotrootrules-latest.tar.gz/

*/mv apache2/* ./*

/rm -rf apache2//

/wget http://www.michael-and-mary.net/CENTOS/modsec-start.conf/

The problem I'm having is that this is blocking the server sensors I set
up in Webmin. These sensors periodically test the site to see if it's
still up and running. After installing mod_security, this process is
blocked. I guess this is being blocked because it is identified as a
script or as a text based client (like lynx, elinks, wget). I'm trying
to find which rule or rules I could change to allow this.

Has anyone installed mod_security alongside webmin and is using webmin
server status sensors? Is there a way to write an ALLOW rule in
mod_security so I can allow this type of request when the user agent is
Webmin and it's from the localhost?

Cheers,
Kas