mod_security with Comodo WAF locks out everbody

[artidens]

... Temporary solution is to disable mod_security on the account/domain in question.

No, I just switched to OSWAP rules until fix that. No need to disable mod_security.

Disabled Comodo rule with ID 218500 until fix. OWASP causes other incompatibilities so this way we can continue to use Comodo and no need to disable mod_security.

Added..

SecRuleRemoveById 218500

..to /usr/local/apache/modsecurity-cwaf/custom_user.conf

[braynex]

... Temporary solution is to disable mod_security on the account/domain in question.

No, I just switched to OSWAP rules until fix that. No need to disable mod_security.

Disabled Comodo rule with ID 218500 until fix. OWASP causes other incompatibilities so this way we can continue to use Comodo and no need to disable mod_security.

Added..

SecRuleRemoveById 218500

..to /usr/local/apache/modsecurity-cwaf/custom_user.conf

I am having the same issue as everyone after an update on WooCommere.  This fix my issue =)

[Starburst]

If anyone needs it, I created a step by step tutorial.
I apologize it took me so long, it's been on my to do list.

https://my.starburstservices.com/index.php?fuse=knowledgebase&controller=articles&view=article&articleId=28

[Starburst]

FYI Comodo released ruleset 1.241 that took care of this issue on 2024-01-21.

[changlee]

Very thank you!