Hi when i go to ModSecurity™ Tools in WHM and click on a rule under rule id i get this error below, and it does this on all our servers. Anyone know how i can fix this please.
Error:An unknown error occurred in the attempt to retrieve the rule.
Hi
This WHM feature designed to work with Vendor setup.
Seems your servers using CWAF Plugin setup which is not compatible with this WHM feature. WHM just don’t know where to get text of rules to display.
However you can get more information by pressing on “More” button on the right side.
To disable this rule you can use plugin (Catalog tab, Search By Rule ID (write rule ID in field above), change status to ‘Off’, Implement)
Regards, Oleg
In fact this is senseless feature. This even not allow to edit rule, just display its text.
[attachment deleted by admin]
Yes not much point if you can’t edit anything.
In the plugin when you go to the rules and it as an item ID are them the numbers you can white list with ConfigServer ModSecurity Control
Yes, these are rule IDs. They are suitable for whitelisting with ConfigServer ModSecurity Control.
Regards, Oleg
Thanks very much
Hi one more question about rules. my WHMCS system where you click save notes in admin, when i save and look at logs it gives me this error below.
211030: COMODO WAF: LDAP Injection Attack Hide
When i whitelist 211030 in ConfigServer ModSecurity Control it does nothing so had to disable it in the plugin. But surely this rule should not block me from doing this in WHMCS.
Hi
This is false positive (rule which block something not malevolent).
I will let know rule-writes about this (However I believe we already have report about this rule).
Regards, Oleg
Ok thanks very much for the info and help