WHMCS 6.1.1 PCRE supportkb.php error

Free Modsecurity rules - Comodo Web Application Fi
#1

Getting these PCRE messages when clicking save on a knowledgebase article in WHMCS 6.1.1
Tried the php.ini and modsec.user.conf PCRE workarounds. Perhaps it’s something in the rule itself?

[Sat Oct 10 08:19:27.820419 2015] [:error] [pid 21334] [client xxxxxxxxxxx] ModSecurity: Rule 3f01550 [id “220042”][file “/usr/local/apache/conf/modsec_vendor_configs/comodo_apache/01_Global_Generic.conf”][line “80”] - Execution error - PCRE limits exceeded (-8): (null). [hostname “host”] [uri “/manage/supportkb.php”] [unique_id “VhkCT8Yu7bkAAFNWd98AAAAJ”]
[Sat Oct 10 08:19:27.842639 2015] [:error] [pid 21334] [client xxxxxxxxxxxxx] ModSecurity: Rule 427eb58 [id “213020”][file “/usr/local/apache/conf/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf”][line “295”] - Execution error - PCRE limits exceeded (-8): (null). [hostname “host”] [uri “/manage/supportkb.php”] [unique_id “VhkCT8Yu7bkAAFNWd98AAAAJ”]

EDIT: Also getting Global_Generic hits on /wp-admin/admin.php

#2

Hi

Rather not in rule but in request. Here is some good reading about this (mod_security Rule execution error - PCRE limits exceeded (-8): (null). | cPanel Forums)
By the way rule 220042 protecting from vulnerability targeting Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 (CVE-2013-0156).
So if you don’t have Ruby on your server installed rule 220042 can be safely added to exclude list.

Regards, Oleg

#3

I should’ve looked the rule up, instead of assuming by the filename that it was a generic rule applying to a bunch of things.
I’ve killed it, and re-added the pcre workarounds to see if that takes care of the other errors logged. Thanks!

PS: Yeah, I had seen the thread in question. Been all over the internet looking for a fix.