« previous next »
Pages: 1 [2]

Author Topic: OWASP CRS v4.15.0 Just Release  (Read 642 times)

0 Members and 1 Guest are viewing this topic.

Offline
overseer
*****
Re: OWASP CRS v4.15.0 Just Release
« Reply #15 on: July 05, 2025, 04:21:46 AM »
In order to support an e-commerce site and a service industry site, here's a couple more rules I had to add to the WordPress section of the disabled rules files:
/usr/local/apache/modsecurity-owasp-old/global_disabled_rules.conf
Code: [Select]
SecRuleRemoveById 981172
SecRuleRemoveById 981319
Logged
Offline
mind5t0rm
*
Re: OWASP CRS v4.15.0 Just Release
« Reply #16 on: July 08, 2025, 10:43:02 AM »
That's very helpful because I plan to update the OWASP rules to the latest version and we are hosting various websites.

Thanks.
Logged
A global boutique AI consulting, marketing & advertising agency, helping businesses worldwide achieve success - headquartered in Singapore, Southeast Asia.
Offline
venty
***
Re: OWASP CRS v4.15.0 Just Release
« Reply #17 on: July 14, 2025, 09:19:21 AM »
Hi,

Many thanks to Starburst...., but should I merge the two in the rbl.conf file
https://prnt.sc/9Tp9vbYKVfdk

BR
Venty
Logged
Offline
Starburst
*****
Re: OWASP CRS v4.15.0 Just Release
« Reply #18 on: July 14, 2025, 01:35:04 PM »
You can do it anyway you like your system setup.
As long as ModSecurity reads the .conf
Logged
Pages: 1 [2]
« previous next »