Comments on: Mod security and wordpress the final config http://www.gray.me.uk/linux-administration-and-management/mod-security-and-wordpress-the-final-config Wandering tech guy Fri, 05 Feb 2010 15:02:25 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: WordPress & Apache mod_security: Part 01 « Pablumfication http://www.gray.me.uk/linux-administration-and-management/mod-security-and-wordpress-the-final-config/comment-page-1#comment-525 WordPress & Apache mod_security: Part 01 « Pablumfication Fri, 05 Feb 2010 15:02:25 +0000 http://www.fulltiming.info/?p=465#comment-525 [...] found a really good post over at Gray.me.uk – Mod security and wordpress the final config which had a few additional rules mentioned, but did not solve the problems I was having initially. [...] [...] found a really good post over at Gray.me.uk – Mod security and wordpress the final config which had a few additional rules mentioned, but did not solve the problems I was having initially. [...]

]]> By: WanderingTechy http://www.gray.me.uk/linux-administration-and-management/mod-security-and-wordpress-the-final-config/comment-page-1#comment-523 WanderingTechy Wed, 04 Nov 2009 18:12:15 +0000 http://www.fulltiming.info/?p=465#comment-523 Hi Ciuly, you are the first person to complain about this, I have read through the source and you are correct root@* is one of the blocked email addresses and I can see why from my log. So far this week over 100 spam comments have been blocked from root@ addresses and as far as I can see yours is the first that wasn't spam. Your last to comments got through ok, so if you ask your question I will of course do my best to answer. Hi Ciuly, you are the first person to complain about this, I have read through the source and you are correct root@* is one of the blocked email addresses and I can see why from my log.
So far this week over 100 spam comments have been blocked from root@ addresses and as far as I can see yours is the first that wasn’t spam.

Your last to comments got through ok, so if you ask your question I will of course do my best to answer.

]]> By: Ciuly http://www.gray.me.uk/linux-administration-and-management/mod-security-and-wordpress-the-final-config/comment-page-1#comment-522 Ciuly Sun, 01 Nov 2009 17:26:58 +0000 http://www.fulltiming.info/?p=465#comment-522 "Hmmm, your comment seems a bit spammy" are you kidding me? if this is wp-spamfree causing it, then it sucks too. GOD, get your regex'es right. root @ domain is a prefectly valid email address. shoot yourselves. PS: I wanted to write about the issues I have with mod_security and all my scripts (including joomla) but seems you are running a tight anti-comment system here. “Hmmm, your comment seems a bit spammy”
are you kidding me? if this is wp-spamfree causing it, then it sucks too.

GOD, get your regex’es right. root @ domain is a prefectly valid email address. shoot yourselves.

PS: I wanted to write about the issues I have with mod_security and all my scripts (including joomla) but seems you are running a tight anti-comment system here.

]]> By: admin http://www.gray.me.uk/linux-administration-and-management/mod-security-and-wordpress-the-final-config/comment-page-1#comment-8 admin Mon, 02 Feb 2009 15:52:21 +0000 http://www.fulltiming.info/?p=465#comment-8 This is for mod_security-2.5.0 and WordPress 2.7. I am not convinced this is the best way to do it from a security point of view but it does get people up and running quickly without disabling ModSecurity Server Wide. Answering this question has brought it to my attention that the repo I am using for mod_security is out of date and version 2.5.5 has a fix for one of the WordPress problems. Time to find a better repo for mod_security or start creating my own RPM's again. Thanks Ofer. This is for mod_security-2.5.0 and WordPress 2.7. I am not convinced this is the best way to do it from a security point of view but it does get people up and running quickly without disabling ModSecurity Server Wide.

Answering this question has brought it to my attention that the repo I am using for mod_security is out of date and version 2.5.5 has a fix for one of the WordPress problems. Time to find a better repo for mod_security or start creating my own RPM’s again. Thanks Ofer.

]]> By: Ofer Shezaf http://www.gray.me.uk/linux-administration-and-management/mod-security-and-wordpress-the-final-config/comment-page-1#comment-7 Ofer Shezaf Mon, 02 Feb 2009 14:12:30 +0000 http://www.fulltiming.info/?p=465#comment-7 I would like to send this interesting info to the ModSecurity mailing list. Can you specify (and e-mail me) which version of WordPress, ModSecurity and core rules you are using? Thanks ~ Ofer I would like to send this interesting info to the ModSecurity mailing list. Can you specify (and e-mail me) which version of WordPress, ModSecurity and core rules you are using?

Thanks
~ Ofer

]]>