Disable mod_security on Dreamhost, for a single cgi script

Posted by Hippyjim on Server Fault See other posts from Server Fault or by Hippyjim
Published on 2010-04-26T19:06:37Z Indexed on 2010/04/26 19:13 UTC
Read the original article Hit count: 315

Filed under:

mod-security

|

dreamhost

Hi

I've searched around a lot, and tried various tweaks to .htaccess files to try to turn off mod_security for a particular cgi script (uber uploader) but it doesn't seem to have any effect.

The most popular one I see rehashed all over the web is:

# Turn off mod_security filtering.
SecFilterEngine Off

# The below probably isn't needed,
# but better safe than sorry.
SecFilterScanPOST Off

Which looks relative simple to me - if "SecFilterEngine" is in some way related to mod_security of course. Shame it has absolutely no effect!

Does anyone have a suggested way I can simply disable it for a request to any file in my cgi-bin directory?

© Server Fault or respective owner

Related posts about mod-security

ModSecurity compile error on nginx

as seen on Server Fault - Search for 'Server Fault'
I'm trying to install ModSecurity on nginx with the following instructions : wget https://github.com/SpiderLabs/ModSecurity/archive/master.zip unzip master cd ModSecurity-master ./autogen.sh ./configure --enable-standalone-module And i got the following error : Checking plataform... Identified… >>> More
modsecurity apache mod-security.conf missing

as seen on Server Fault - Search for 'Server Fault'
Greetings Serverfaultians. I'm not a server guy as you can see from my noob score of 1 point. But maybe those more versed can help me. I'm using Ubuntu v13.10 32-bit Server and Apache2 v2.4.6 and I'm trying to set up and configure modsecurity and modevasive on an internet-exposed production/test… >>> More
How to detect brute force in mod-security

as seen on Server Fault - Search for 'Server Fault'
I checked the core rules set in the mod-security but it's didn't contain the rules related to Brute-Force Attack!!! Did anyone know how to write the rules or the existing rules for this kind of Attack! Thanks in advanced, >>> More
Necesity of ModSecurity if Apache is behind Nginx

as seen on Server Fault - Search for 'Server Fault'
I have my Apache installed behind Nginx. So every request that comes in is first handeled by Nginx. If there is dynamic content needed the request is send to Apache which listens on port 8080. Pretty basic reverse proxy setup. Now with this setup the first entry point is Nginx. Is it still needed… >>> More
Detecting Request that uses invalid Encoding using Modsecurity

as seen on Server Fault - Search for 'Server Fault'
I am trying write a virtual patch using modsecurity for my hosted web application using following rule i.e. <Location /index.php> SecDefaultAction phase:2,t:none,log,deny # Validate parameter names SecRule ARGS_NAMES "!^(articleid)$" \ "msg:'Unknown parameter: %{MATCHED_VAR_NAME}'" # Expecting… >>> More

Related posts about dreamhost

How to configure DNS so that www.example.com goes to one server, *.example.com to another

as seen on Server Fault - Search for 'Server Fault'
I'm trying to set up my domain as follows, but I'm not actually sure if it's possible. I have a domain where I would like the base and www addresses to go to my static site, but others to go to my application server. For example: My domain is registered with Dreamhost, and my application is on a… >>> More
Git on DreamHost still balking on big files even after I compiled with NO_MMAP=1

as seen on Server Fault - Search for 'Server Fault'
I compiled Git 1.7.0.3 on DreamHost with the NO_MMAP=1 option, I also supplied that option when I did the "make NO_MMAP=1 install". I have my paths set up correctly, which git reports my ~/bin dir which is correct, git --version returns the correct version. But when I try to do a "git push origin… >>> More
Setup Dreamhost + Google Apps

as seen on Super User - Search for 'Super User'
I registered a domain with Dreamhost. I want to setup Google Apps with the domain I registered. I tried googling instructions and looking at the Dreamhost wiki and Google support, but the instructions are confusing. Can some one create an easy step-by-step guide for me? >>> More
Deploying Sinatra app on Dreamhost/Passenger with custom gems

as seen on Stack Overflow - Search for 'Stack Overflow'
I've got a Sinatra app that I'm trying to run on Dreamhost that makes use of pony to send email. In order to get the application up and running at the very beginning (before adding pony), I had to gem unpack rack and gem unpack sinatra into the vendor/ directory, so this was my config.ru: require… >>> More
What exactly is the difference between the Dreamhost IDE and Netbeans?

as seen on Stack Overflow - Search for 'Stack Overflow'
I just started using Netbeans about a week ago, and really like it thus far. Now I'm seeing something about Dreamhost IDE which I guess is a program that is built using the Netbeans platform. I use Dreamhost as the hosting company for many of my projects. What is the benefit of using Dreamhost… >>> More