Blog

Monday, 17 October 2016 22:01

Perfect Dashboard and Mod Security

Rate this item
(0 votes)

I've just been changing my reseller account to another host and discovered that Perfect Dashboard was now failing in initiating backups and updates. Talking with the support at Perfect Dashboard and they suggested it was likely that Perfect Dashboard was being blocked by Apache's mod_security.

They provided some rules that I could pass to my new host that they could add to the module to let Perfect Dashboard communicate with the sites correctly.

It took about 48 hours after the rules were applied for Perfect Dashboard to start functioning correctly. Not sure why but at least everything is again as it should be.

If you're interested the rules to add to mod_security are as follows:

SecRule REMOTE_ADDR "^46\.101\.7\.25$" phase:1,nolog,allow,ctl:ruleEngine=Off
SecRule REMOTE_ADDR "^188\.166\.167\.199$" phase:1,nolog,allow,ctl:ruleEngine=Off
SecRule REMOTE_ADDR "^46\.101\.105\.144$" phase:1,nolog,allow,ctl:ruleEngine=Off

As an alternative it was also suggested the code below could be added to the root .htaccess file:

SetEnvIfNoCase Remote_Addr ^46.101.17.125$ MODSEC_ENABLE=Off
SetEnvIfNoCase Remote_Addr ^188.166.167.199$ MODSEC_ENABLE=Off
SetEnvIfNoCase Remote_Addr ^46.101.105.144$ MODSEC_ENABLE=Off

If you have a similar problem then I hope one of these two methods can provide you with a solution.

Read 432 times Last modified on Tuesday, 09 May 2017 21:48
More in this category: « Securing Joomla Administrator

Leave a comment

Make sure you enter all the required information, indicated by an asterisk (*). HTML code is not allowed.

Legal

Chris Hall
T/A MSWD
166 Caswell Close
Farnborough
GU14 8TG

Tel +447849955316

Recent Posts

© 2016 MSWD, All Rights Reserved.

Search

Contact
We'd love to hear from you. You can also get in touch by:
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Phone: +447765675370
1000 characters left