Re: [mod-security-users] Paranoia level

[Ervin H. <ai...@gm...>]

Hi,


plase note, this is a CRS question, not ModSecurity.

There is a dedicated mailing list for the rule set:

https://groups.google.com/a/owasp.org/g/modsecurity-core-rule-set-project

On Wed, Mar 10, 2021 at 11:21:14AM +0530, Blason R wrote:
> Hi Team,
> 
> I am really looking at everywhere but unable to find the exact information.
> I am struggling to find how do I increase Paranoia level gradually?
> I really dont see settings in configuration or might have overlooked? but
> can someone can help me understanding the procedure?

take a look to your crs-setup.conf:
https://github.com/coreruleset/coreruleset/blob/v3.4/dev/crs-setup.conf.example#L176-L182

The default PL is 1:

https://github.com/coreruleset/coreruleset/blob/v3.4/dev/rules/REQUEST-901-INITIALIZATION.conf#L100-L107

this means if user doesn't give any explicit value in the setup,
then this rule sets up it to 1.

Just uncomment the lines in your setup, and set the necessary
value in rule 900000. Before that action, you can find a small
summary about paranoia levels.


hth,


a.