Possible a False Positive

Free Modsecurity rules - Comodo Web Application Fi
#1

I have installed PHPMyAdmin in one server where the WAF is installed.

One action that WAF blocks is when I upload a MySQL file.

So my question is, what do I need to provide you in order to fix this possible false positive?
Where should I start looking (in logs)? I have looked into mod sec_audit.log and it shows something there. Should I sent it to you?

Thanks in advance for the help.

#2

You can take last entry from audit_log starting from “A” part and paste it here.

#3

Alright, thank you for the tip.

I have posted (PM) the audit_log as per your request.

#4

Thank you for info provided.

We will check it and fix rule ASAP.

Regards, Oleg

#5

Was this already fixed?

#6

I have send you PM message with recommendations, because this is private issue.