I’d like to confirm if Comodo is still maintaining their free Modsecurity Ruleset?
Over the past few days, I’ve encountered issues with cPanel updates due to timeouts trying to update the mod security rules from Comodo.
It appears that the website waf.comodo.com has been inaccessible for the past few days as well. Can someone confirm if this has been discontinued or otherwise advise if it’s being looked into?
Bump, experiencing same issue. Directadmin build scripts are failing due to unresponsive waf.comodo.com. Confirmed from multiple hosts.
+1
We’re also experiencing the same issue on our servers fleet:
The system could not download the file “https://waf.comodo.com/doc/meta_comodo_apache.yaml”: curl: (7) Failed to connect to waf.comodo.com port 443: Connection timed out
Can this be looked at ASAP? Our systems are not updating properly.
Today is 2024-05-07, and https://waf.comodo.com isn’t responding.
Are they not offering the Rulesets anymore, and just didn’t tell anyone?
OK so I did what Comodo apparently couldn’t and got an answer. I signed up for the WAF at modsecurity(dot)comodo(dot)com which, if I am remembering correctly, was never required before. I received an email with instructions. Step 1 said to visit waf(dot)comodo(dot)com which does not load. Further in the email it says to email support(at)comodo(dot)com for support or questions, so I emailed them. I received a response from support(at)xcitium(dot)com saying to email subscriptions(at)comodo(dot)com, so I emailed them. I received an email from subscriptions(at)comodo(dot)com saying to email cwatchsubscriptions(at)nurd(dot)com. I emailed cwatchsubscriptions(at)nurd(dot)com and received an email stating the following
"We would like to inform that we deal with a different product than the Comodo Web Application Firewall. Therefore, we don’t have any information to share related to Comodo Web Application Firewall. By the way, the Comodo Web Application Firewall is a discontinued product. It has been discontinued long ago. If you are looking for a Web Application Firewall for your server, please look for the Comodo EndPoint Protection. "
So yeah, it is dead. Wonderful communication here.
and mysteriously waf.comodo.com is now responding and has a login/registration page that appears to accept the credentials for the account I created at https://modsecurity.comodo.com/ 3 days ago.