Comments on: Remove and Uninstall or Disable ModSecurity (mod_security)

By: Mike

Mike — Wed, 06 May 2009 07:30:14 +0000

I had this issue and apparently my host had a specific block in place that prevented the .htaccess modification from taking effect.

The solution to remove the module might not be a good idea since it’s a server wide change, there is apparently a whitelist file that you can modify to allow specific domains from being exempt.

Just SSH into the server as root using PUTTY or something similar.

Type the following

nano usr/local/apache/conf/modsec2/whitelist.conf

This will give you a flat screen editor that you can use to modify the file, just add the following line, once for each domain you wish to exempt.

SecRule SERVER_NAME “example.com” phase:1,nolog,allow,ctl:ruleEngine=Off

no need to replace Server_name with your actual server name, only need to replace example.com with the domain.

Apache will then need to be restarted.

By: Webagentur

Webagentur — Sat, 29 Nov 2008 18:32:13 +0000

Mich würde mal eher interessieren, ob man mit mod_security2 auch Mails verschicken lassen kann?

By: Fairlights

Fairlights — Fri, 21 Nov 2008 07:25:46 +0000

Awsome, slightly different in the apache i’m using on windows, i just commented out this line:

#Include conf/Suite-extra/mod_security.conf

Thanks now i can work on my intranet again owe you big time

By: TSSE v4.3 problem - Bravo List

TSSE v4.3 problem - Bravo List — Wed, 12 Nov 2008 06:11:10 +0000

[...] if i remeber right, this can be disabled from .htaccess Check the following links for further info: Remove and Uninstall or Disable ModSecurity (mod_security) My Digital Life How to disable mod_security in .htaccess file Disabling mod_security mod_security Guide and [...]

By: Melinda

Melinda — Sat, 25 Oct 2008 22:05:35 +0000

Just like Flanger, it doesn’t work for me. Adding that two lines seem to block more and it doesn’t resolve the error 500 error that was returned by ModSecurity.

By: Flanger

Flanger — Mon, 20 Oct 2008 10:58:27 +0000

it doesnt work for me unfortunately

if I add these two lines to my .htaccess file to the root,
the whole domain is blocked, else if I make .htaccess file
in custom directory and add these lines only that dir is locked

and server gives me Http error 500 internal server error…

By: Karlos

Karlos — Sun, 29 Jun 2008 15:47:38 +0000

Cheers, just what I needed, worked first time

By: Neran

Neran — Thu, 17 Apr 2008 09:13:55 +0000

Thanks alot! It works!

By: Adam Dempsey

Adam Dempsey — Fri, 01 Feb 2008 16:51:19 +0000

Exactly what I was looking for, thanks

By: John

John — Fri, 06 Jul 2007 16:16:03 +0000

A BIG Thanks to You!

It really works! Thanks You!