View source

'''ModSecurity''' (<tt>mod_security</tt>) is an Apache module that provides an [[Wikipedia:Application layer firewall|application layer firewall]] for web applications. The OCF uses ModSecurity to protect our web users from common web application attacks and comment spam.

== Troubleshooting ==

ModSecurity is configured using a set of ''rules'' that determine whether a request should be flagged as an attack or comment spam. Unfortunately, as with any firewall and spam filtering system, there is always the possibility for false positives.

If you believe that ModSecurity is causing problems with your web application, please perform the following steps before [[contacting OCF staff]]:
# Check the [[web server logs]] (particularly the [[Web server logs#Error logs|error logs]]) to verify that ModSecurity is causing problems.
# Identify the relevant log messages and include them in your correspondence.

== External links ==

* [http://www.modsecurity.org ModSecurity official website]
* [http://www.modsecurity.org/documentation/modsecurity-apache/2.1.2/html-multipage/ ModSecurity Reference Manual]

[[Category: Web Hosting]]