1. cPanel & WHM Documentation
  2. WHM
  3. Security Center
  4. ModSecurity® Configuration
modsecurity apache whmui

ModSecurity® Configuration

Valid for versions 82 through the latest version

Version:

82

Last modified: June 13, 2024

Looking for this interface?
Note:

Your hosting provider can enable or disable this interface for resellers in WHM's Edit Reseller Nameservers and Privileges interface (WHM >> Home >> Resellers >> Edit Reseller Nameservers and Privileges).

Overview

This interface allows you to configure ModSecurity’s global settings.

Note:

The system loads the /etc/apache2/conf.d/modsec/modsec2.user.conf file as an include.

  • In previous versions of cPanel & WHM, EasyApache used this file as the default ruleset.
  • This file’s rules may still affect the way in which ModSecurity functions, which may result in false positives on your system.
  • If you see many false positives, check this file for custom rules.

Configure Global Directives

Note:
  • For more information about a setting or directive, click the directive name.
  • After you make the desired changes, click Save at the bottom of the interface.

In this interface, you can configure the following settings:

Setting Directive Description
Audit Log Level SecAuditEngine This setting determines how the audit engine logs transactions. You can choose from the following options:
  • Only log noteworthy transactions.
  • Do not log any transactions.
  • Log all transactions.
Warning:
We strongly recommend that you do not select this option. This option causes Apache to log every transaction, including your users’ and clients’ private data. The resulting log files will fill your system’s partitions quickly. Use this option only to debug your server.
Connections Engine SecConnEngine This setting determines how the connections engine processes rules. You can choose from the following options:
  • Process the rules.
  • Do not process the rules.
  • Process the rules in verbose mode, but do not execute disruptive actions.
Rules Engine SecRuleEngine This setting determines how the rules engine processes rules. You can choose from the following options:
  • Process the rules.
  • Do not process the rules.
  • Process the rules in verbose mode, but do not execute disruptive actions.
Backend Compression SecDisableBackendCompression This setting enables or disables backend compression, but does not affect frontend compression. This setting defaults to Enabled.
Geolocation Database SecGeoLookupDb This setting allows you to specify the geolocation database’s path. Enter the desired path in the Geolocation Database text box.
Google Safe Browsing Database SecGsbLookupDb This setting allows you to specify the Google Safe Browsing™ Database’s path. Enter the desired path in the Google Safe Browsing Database text box.
Guardian Log SecGuardianLog This setting allows you to pipe transaction log information to an external application for additional analysis. Enter the path to the desired application in the Guardian Log text box.
Project Honey Pot Http:BL API Key SecHttpBlKey This setting allows you to supply a Project Honey Pot API Key to use with the @rbl operator. Enter the API key in the Project Honey Pot Http:BL API Key text box.
Perl Compatible Regular Expressions Library Match Limit SecPcreMatchLimit This setting determines the match limit for the PCRE library. This setting defaults to 1500.
Perl Compatible Regular Expressions Library Match Limit Recursion SecPcreMatchLimitRecursion This setting determines the match limit recursion for the PCRE library. This setting defaults to 1500.

Additional Documentation