Do you want to use ModSecurity in a transparent mode? Meaning that no actions will be performed? You can use the SecRuleEngine command. The syntax is: SecRuleEngine On|Off|DetectionOnly The possible values are:On: process rulesOff: do not process rulesDetectionOnly: process rules but…
Finding out where a package is located can be useful sometimes. In our example, we will consider the wp-cli package. We had on a server three installations of wp-cli. One was installed by default by cPanel, another two were installed…
Sometimes, it can be useful to remove accounts not pointing to a specific server. Anyway, notice that even if a domain does not point the server, that particular account might be still used. IT can be used for example for…
Some users reported to us that they can log into cPanel accounts with their reseller accounts' passwords. This is not a cPanel bug or security issue. It is this way by design and it's enabled by default. In fact, you…
There can be many reasons for which you might want to block access from specific countries. We will not get into such details. We will present two methods that you can use. Method #1 - with cPHulk cPHulk is the…
csf (ConfigServer Security & Firewall) offers the possibility to redirect/forward traffic from one IP/port to another IP/port. The requirements, as stated in the /etc/csf/csf.redirect file, are: Requirements:nat tablesipt_DNAT iptables moduleipt_SNAT iptables moduleipt_REDIRECT iptables module The lines listed below need to be…
