Articles in this section

A website hosted in Plesk fails to load: ModSecurity: Response body too large

Kuzma Ivanov
Updated
Plesk for Linux kb: technical

Applicable to:

  • Plesk for Linux

Symptoms

  • A website is not loading with the following error message in a web browser:

    PLESK_INFO: 500
    Internal Server Error

  • The following messages are logged in Domains > example.com > Logs:

    CONFIG_TEXT: [error] [client 203.0.113.2] ModSecurity: Output filter: Response body too large (over limit of 524288, total not specified). [hostname "www.example.com"] [uri "/index.php"] ...

Cause

The website has exceeded default ModSecurity SecResponseBodyLimit parameter (1 MB).

Resolution

Adjusting 'SecResponseBodyLimit' for one domain

 

  1. Log in to Plesk.

  2. Go to Domains > example.com > Hosting & DNS > Apache & nginx Settings.

  3. Add the line below to Additional directives for HTTP and Additional directives for HTTPS fields to increase SecResponseBodyLimit to 256 MB (or define your own value):

    CONFIG_TEXT: <IfModule mod_security2.c>
        SecResponseBodyLimit 268435456
    </IfModule>

  4. Apply the changes.

Adjusting 'SecResponseBodyLimit' for all domains

 

  1. Log in to Plesk.

  2. Go to Tools & settings > Web Application Firewall (ModSecurity) > Settings tab. > Custom directives section:

  3. Add the line below to Custom directives section to increase SecResponseBodyLimit to 256 MB (or define your own value):

    CONFIG_TEXT: SecResponseBodyLimit 268435456

  4. Apply the changes.

 

 

Was this article helpful?

Comments

1 comment
Date Votes
  • Avatar
    Drs. Andor Demarteau

    The for all domains code still works, the for one domain version causes errors on the site….

    Maybe an update of the code is needed?

    0

Please sign in to leave a comment.