ModSecurity Discussion

Brought to you by: victorhora, zimmerletw

Rules

This forum focuses its discussions on the OWASP ModSecurity Core Rule Set specifically and on rule questions/issues in general

Topic	Posts	Views	Last Post
ModSecurity blocks ERDDAP queries containing '(' and ')' characters By Lorenzo Corgnati on Thu Feb 08, 2024 04:36 PM	1	62	By Lorenzo Corgnati on Thu Feb 08, 2024 04:36 PM
How to identify if there are any attachments in REQUEST_BODY for crea... By Karthik Sirimalla on Mon Apr 05, 2021 08:27 AM	3	423	By Karthik Sirimalla on Tue Apr 06, 2021 09:51 AM
Owncloud Rule By Carlos on Sat Feb 20, 2021 09:04 PM	1	473	By Carlos on Sat Feb 20, 2021 09:04 PM
Lync 2013 By End User on Tue Feb 18, 2020 03:48 PM	2	569	By Taylor on Thu Feb 20, 2020 08:59 AM
SecRule to bypass requestBodyLimit By rres-admin on Mon Feb 17, 2020 04:48 PM	4	754	By Taylor on Thu Feb 20, 2020 08:48 AM
Can modsecurity do all of these requirement ? By Jonny on Mon Dec 23, 2019 10:42 AM	1	187	By Jonny on Mon Dec 23, 2019 10:42 AM
Disable ssl certification authentication / verification By Sachin Deshpande on Wed Sep 11, 2019 10:41 AM	1	174	By Sachin Deshpande on Wed Sep 11, 2019 10:41 AM
Help understanding and blocking rules By Brad on Wed Sep 19, 2018 03:16 AM	4	1151	By Brad on Sun Sep 23, 2018 12:55 AM
Rule for SecRequestBodyLimit By Andre on Thu Mar 08, 2018 03:36 PM	2	222	By hans mayer on Mon Jul 16, 2018 08:56 PM
exec: script for specific directory By hans mayer on Sun Jul 01, 2018 09:00 PM	1	156	By hans mayer on Sun Jul 01, 2018 09:00 PM
Custom rules with modsecurity By Nisari on Tue May 29, 2018 02:17 PM	1	230	By Nisari on Tue May 29, 2018 02:17 PM
Disable .axd string match on rule is 920440 - IIS 10 By Mike Parsons on Tue Apr 17, 2018 06:06 PM	1	1061	By Mike Parsons on Tue Apr 17, 2018 06:06 PM
Need rule to block requests with ARGS_NAMES that begin with specific ... By Joseph Jozwik on Thu Mar 29, 2018 02:10 PM	4	258	By Joseph Jozwik on Thu Mar 29, 2018 05:09 PM
Upload blocked at firewall (Mod security with nginx) By Nisari on Wed Feb 28, 2018 05:22 AM	1	267	By Nisari on Wed Feb 28, 2018 05:22 AM
Help - Geo Lookup returns error Geo lookup for "IP:port" failed: No s... By Greg Williams on Tue Feb 27, 2018 11:32 AM	1	226	By Greg Williams on Tue Feb 27, 2018 11:32 AM
How to Adjust Anomaly Threshold on Cookies? By Moonshine on Thu Jan 04, 2018 03:41 PM	1	247	By Moonshine on Thu Jan 04, 2018 03:41 PM
Open Port 3306 By Mervin Govender on Mon Oct 16, 2017 11:05 AM	1	252	By Mervin Govender on Mon Oct 16, 2017 11:05 AM
How to whitelist a file or path to a file from all rules? By Daniel Kolar on Wed Oct 11, 2017 11:03 AM	3	1865	By Chaim Sanders on Mon Oct 16, 2017 03:12 AM
help with password attack By Gary on Fri Sep 22, 2017 11:58 AM	2	341	By Chaim Sanders on Mon Sep 25, 2017 11:17 PM
SecRule REQUEST_HEADERS:Authorization By Sascha Papini on Wed Jul 19, 2017 02:25 PM	1	630	By Sascha Papini on Wed Jul 19, 2017 02:25 PM
DOS block rule By BJ van Dijk on Mon Apr 24, 2017 08:52 AM	1	524	By BJ van Dijk on Mon Apr 24, 2017 08:52 AM
detected XSS using libinjection - cookie found within REQUEST_HEADERS By Ed Greenberg on Thu Apr 20, 2017 03:05 PM	3	3044	By Ed Greenberg on Fri Apr 21, 2017 12:04 PM
REQUEST_FILENAME not accessible or triggered in Phase 4 for rsub filter By Richard Powell on Wed Apr 27, 2016 07:11 PM	1	400	By Richard Powell on Wed Apr 27, 2016 07:11 PM
detection mode: error not being logged and page still being blocked By colin mac on Mon Apr 18, 2016 05:57 PM	3	268	By Chaim Sanders on Mon Apr 18, 2016 10:03 PM
Modsecurity rule for blocking a request when a parameter doesn't meet... By Elle on Tue Mar 08, 2016 03:07 PM	2	318	By Chaim Sanders on Tue Mar 08, 2016 04:17 PM

Topic

Posts

Views

Last Post