Wish List (Please post your wishes here)

[netdias]

Wish a button to shut all the rules off !

[netdias]

Wish a button to shut all the rules off !

Its' done thank you!

[chuvadenovembro]

A monitor for view all disabled global rules

A monitor for view all domains with disabled rules

[designcentre]

A monitor for view all disabled global rules A monitor for view all domains with disabled rules

Yes please I second that (again)

[chuvadenovembro]

I outlined this suggestion for monitoring whitelist:

This attached in my post





[attachment deleted by admin]

[brijendrasial]

Well some of my clients host adult site also. I need a feature like with a button name "Disable Adult Security" for particular sites . which will disable all enabled adult rules for particular site and disable adult comment blocking, post and few more which u have added in ur rules. Please see what u can do for it

[Leader2011]

To be able to store the rules in a directory of your choosing, I.E /usr/local/apache/conf/modsec_rules or where ever I need i them.

[ejsolutions]

Another thumbs up for a whitelist interface.
Also, where are they stored, so that they can be easily replicated to other servers? It appears to be exclude.yml

[MironJ]

Hi,
Do not remove global exclude and exclude per domain when rules are updated with a new version.
Or at least create backup with update script so we can easily restore our rules exclude list.

[akabakov]

When rules are updated only directory 'rules' is rewritten. Also rules are backuped in update in /<path_to_cwaf>/tmp/rules/workdir2/rules/ and /<path_to_cwaf>/tmp/rules/workdir1/rules/ (previous rules version).

[MironJ]

Hm, looks like they are not properly backuped because in both "workdir" folders I have the same (cwaf default) exclude file and all per domain excludes are missing. Some clients complained that they again have same troubles with mod_security false-positive detection and now again I'm excluding rules one by one per domain as clients reporting errors.

[akabakov]

Global and domains excludes usually are  not backuped and rewritten in update process.

[MironJ]

Ok, so it's possible to automatically backup complete workdir1 to preserve any excludes at rule update?
I mean, I can always manually update any changed rule, but as there is one click option I will rather use this automatic way than manually doing everything in every server (~30).

[akabakov]

If you use our rules, web-client and Cpanel, you can scheduled update as you need  in Cpanel section "Comodo WAF - Configuration - Schedule Update". Also you can add script /<path_to_cwaf>/cwaf/scripts/updater.pl in crontab. Please, send your next message in new topic or submit a ticket at https://support.comodo.com, section "WAF support"

[CentosUser]

A plugin/module for Webmin would be great