LiteSpeed + 0.32

Free Modsecurity rules - Comodo Web Application Fi
1

lsws crashes instantly with some rules. Im unable to find the rule ID in the logs because of this.
When I ignore the directory (with mod_sec panel from ConfigServer) (it’s a wp-admin function) everything works as intended.

The request is GET /wp-admin/admin.php?page=PT1_admin_mnu can you help me find the rule id?

2

Hello

LiteSpeed doesn’t fully support mod_security, so some rules will not work.

Mod_security can write logs to file or to database. So, first you need to check your mod_security configuration options to find:

  • location of logs, e.g.

SecAuditLog /var/log/apache2/modsec_audit.log

  • audit log level, e.g.

SecAuditEngine On

3

We already have this log setup. I even reproduced the lsws FC many times to try to grab something. But didnt work. All I get is a log that lsws restarted unexpectdly.

4

i face same problem here, litespeed always restart

5

Please, provide more info so we can investigate and help you.

  • What version of LiteSpeed are you using?
  • Which way do you use to load CWAF rules?
  • What actions we need to do to reproduce LiteSpeed restart?
  • Anything else that could help us…