Child pages
  • ModSecurity Configuration
Skip to end of metadata
Go to start of metadata

For cPanel & WHM version 70

(WHM >> Home  >> Security Center >> ModSecurity™ Configuration)

Overview

This interface allows you to configure ModSecurity's global settings.

Note:

The system loads the /usr/local/apache/conf/modsec2.user.conf file as an include.

  • In previous versions of cPanel & WHM, EasyApache used this file as the default ruleset.
  • This file's rules may still affect the way in which ModSecurity functions, which may result in false positives on your system.
  • If you see many false positives, check this file for custom rules.

Configure Global Directives

Notes:

  • For more information about a setting or directive, click the directive name. 
  • After you make the desired changes, click Save at the bottom of the interface.

In this interface, you can configure the following settings:

SettingDirectiveDescription
Audit Log LevelSecAuditEngine

The Audit Log Level setting determines how the audit engine logs transactions. You can choose from the following options:

  • Log all transactions.
  • Do not log any transactions.
  • Only log noteworthy transations.
Connections EngineSecConnEngine

The Connections Engine setting determines how the connections engine processes rules. You can choose from the following options:

  • Process the rules.
  • Do not process the rules.
  • Process the rules in verbose mode, but do not execute disruptive actions.
Rules EngineSecRuleEngine

The Rules Engine setting determines how the rules engine processes rules. You can choose from the following options:

  • Process the rules.
  • Do not process the rules.
  • Process the rules in verbose mode, but do not execute disruptive actions.
Backend CompressionSecDisableBackendCompression

The Backend Compression setting enables or disables backend compression, but does not affect frontend compression.

This setting defaults to Enabled.

Geolocation DatabaseSecGeoLookupDb

The Geolocation Database setting allows you to specify the geolocation database's path.

Enter the desired path in the Geolocation Database text box.

Google Safe Browsing DatabaseSecGsbLookupDb

The Google Safe Browsing Database setting allows you to specify the Google Safe Browsing™ Database's path.

Enter the desired path in the Google Safe Browsing Database text box.

Guardian LogSecGuardianLog

The Guardian Log setting allows you to pipe transaction log information to an external application for additional analysis.

Enter the path to the desired application in the Guardian Log text box.

Project Honey Pot Http:BL API KeySecHttpBlKey

The Project Honey Pot Http:BL API Key setting allows you to supply a Project Honey Pot API Key to use with the @rbl operator.

Enter the API key in the Project Honey Pot Http:BL API Key text box.

Perl Compatible Regular Expressions Library Match LimitSecPcreMatchLimit

The Perl Compatible Regular Expressions Library Match Limit setting determines the match limit for the PCRE library.

This setting defaults to 1500.

Perl Compatible Regular Expressions Library Match Limit RecursionSecPcreMatchLimitRecursion

The Perl Compatible Regular Expressions Library Match Limit Recursion setting determines the match limit recursion for the PCRE library.

This setting defaults to 1500.

Additional documentation