Hello,
We have a customers website that is triggering some ModSecurity logs which is then getting picked up by the ModSecurity Fail2ban jail resulting in a ban of the customers IP address.
It appears that something is causing an internal server error which seems like the reason it is showing up in ModSecurity, but the 'H' section doesn't have a rule ID. How can I disable the rule that is causing this to show up in the logs.
Here are the C, F, H sections of one of the log entries:...
How to switch off ModSecurity rule without rule ID?
We have a customers website that is triggering some ModSecurity logs which is then getting picked up by the ModSecurity Fail2ban jail resulting in a ban of the customers IP address.
It appears that something is causing an internal server error which seems like the reason it is showing up in ModSecurity, but the 'H' section doesn't have a rule ID. How can I disable the rule that is causing this to show up in the logs.
Here are the C, F, H sections of one of the log entries:...
How to switch off ModSecurity rule without rule ID?