Roadmap

Feature requests

Bug reports Feature requests

Voters 24

  • Avatar
  • Avatar
  • Avatar
  • Avatar
  • A
  • Avatar
  • D
  • + 18 voters
  • J
  • L
  • D
  • M
  • Avatar
  • R
  • M
  • B
  • Avatar
  • A
  • W
  • Z
  • M
  • R
  • A
  • Avatar
  • Avatar
24

ModSecurity User Level Restriction

  • Live
Avatar
 Khurram Shahzad

Hi,

Add Modsecurity Icon in User Level, able to enable & Disable this feature for single user or domain

  • 2020-02-27 -
A

Activity Newest / Oldest

J

Jason McOrmick

Bugreport: the enable/disable ModSecurity on a per-domain basis doesn't seem to work at all.

On my DA 1.649 / OLS 1.7.16 server, whatever SecRuleEngine set in any of the separate /usr/local/directadmin/data/users/USER/domains/DOMAIN.COM.modsecurity_rules files, it will be ignored. Only the default server-wide value from the /usr/local/lsws/conf/httpd-modsecurity.conf file is used.

Also, IF it would work: the modsec interface has only the On/Off settings for SecRuleEngine: it's missing "DetectionOnly" which can be helpful for tracking down rule issues without affecting user experience.

Avatar

smtalk

It's available in pre-release now. For logs to be shown, re-compilation of ModSecurity is needed:
cd /usr/local/directadmin/custombuild
./build update
./build modsecurity

  • R
R

Richard Lincourt

nice things :-) directadmin become really more nice again !! im happy to see what you do smtalk !

R

Richard Lincourt

is it working with litespeed ?

Avatar

smtalk

Yes, but it requires version 6.0 of LiteSpeed.

Avatar

smtalk

Status changed to: Live

Avatar

smtalk

Status changed to: In progress

Avatar

smtalk

Status changed to: Planned

A

apogee

and thus with the possibility to ex/include single rules and a mod_sec viewer (like for example ConfigServers ModSecurity Control - cmc)

Avatar

Owais

Yes exactly need this feature at user level like cpanel.