Enabling or disabling ModSecurity rules in cPanel

It is possible that on some occasion in our application or CMS installed we get 403 errors or 301, 302 redirects. In this case, it is a good idea to check the ModSecurity section of our VPS in case it is the one that is detecting that the changes we make comply with any suspicious rule and therefore, it blocks it.

Disable or enable rules

Therefore, to access ModSecurity in the VPS, we will follow the following steps.

• From your VPS (WHM) control panel, filter by ModSecurity and go to "ModSecurity Tools":

• Once inside, a table will appear with the list of hits sorted by date in descending order.
• From there you can choose a rule, click on the message in the "Rule ID" column and access it.
• Once inside, to deactivate it, uncheck "Enable rule". Click on "Implement and restart Apache" so that the rule is applied when you click on "Save":

After these steps, the rule will be deactivated.

How to detect the rule/s that blocks us.

Sometimes, to detect the exact rule that is blocking us, the ideal is to have the hit list table open in one tab and perform the action that is blocking us in another. After the blocking occurs, refresh the tab with the hit list table and see if one has been generated recently.

Si todavía tienes dudas, contacta con nosotros y te ayudamos.