Which ports should be opened in the firewall on a Plesk server?
Domain's page cannot be open in Plesk with error: TypeError: Cannot read properties of null (reading 'id')
Is it possible to hide Vulnerability Protection promo banner on the "Security Status" drawer in WP Toolkit in Plesk?
Unable to migrate a customer on a Plesk server: You cannot manage resellers due to license restrictions
How to move a domain between customers on a Plesk server?
How to change my Plesk server home dashboard to the new design?
Saving Hosting Settings on Plesk for Linux fails: JSON.parse: Unexpected non-whitespace character after JSON at position 19198 of the JSON data, zone example.com/IN: has no NS records
Plesk interface on Plesk Onyx 17.5 and earlier is not accessible: syntax error, unexpected ':', expecting ';' or '{' (WelcomePanelTrait.php:15)
Restricted mode does not restrict access to key features for additional administrators in Plesk
Does Plesk create tasks besides those in the Windows Task Scheduler?

See more

How to add a custom rule to Web Application Firewall (ModSecurity) in Plesk?

Daniel Yordanov

Updated June 19, 2024 12:43

Plesk for Windows kb: how-to Plesk for Linux

Applicable to:

Plesk for Linux
Plesk for Windows

Question

How to add a custom rule to Web Application Firewall (ModSecurity) in Plesk?
Can I add a global custom rule to Web Application Firewall (ModSecurity) in Plesk?

Answer

1. Log in to Plesk

2. Go to Tools & Settings > Web Application Firewall (ModSecurity) > Settings tab

3. Ad the rule to the "Custom Directives" section

Note: For example, the following rule restricts access to any .php file on domains:

CONFIG_TEXT: SecRule REQUEST_URI ".*\.php$" "id:555555,log,noauditlog,deny,status:403"

4. Press Apply

Additional information

Making :: Core Rule Set Documentation

Comments

0 comments

Please sign in to leave a comment.

Have more questions? Submit a request