Re: [mod-security-users] Paranoia level

[Blason R <bla...@gm...>]

My bad and apologies for wrong posting.

On Wed, Mar 10, 2021 at 12:32 PM Ervin Hegedüs <ai...@gm...> wrote:

> Hi,
>
>
> plase note, this is a CRS question, not ModSecurity.
>
> There is a dedicated mailing list for the rule set:
>
> https://groups.google.com/a/owasp.org/g/modsecurity-core-rule-set-project
>
> On Wed, Mar 10, 2021 at 11:21:14AM +0530, Blason R wrote:
> > Hi Team,
> >
> > I am really looking at everywhere but unable to find the exact
> information.
> > I am struggling to find how do I increase Paranoia level gradually?
> > I really dont see settings in configuration or might have overlooked? but
> > can someone can help me understanding the procedure?
>
> take a look to your crs-setup.conf:
>
> https://github.com/coreruleset/coreruleset/blob/v3.4/dev/crs-setup.conf.example#L176-L182
>
> The default PL is 1:
>
>
> https://github.com/coreruleset/coreruleset/blob/v3.4/dev/rules/REQUEST-901-INITIALIZATION.conf#L100-L107
>
> this means if user doesn't give any explicit value in the setup,
> then this rule sets up it to 1.
>
> Just uncomment the lines in your setup, and set the necessary
> value in rule 900000. Before that action, you can find a small
> summary about paranoia levels.
>
>
> hth,
>
>
> a.
>
>
>
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/
>