Re: Paranoia level

My bad and apologies for wrong posting.

On Wed, Mar 10, 2021 at 12:32 PM Ervin Hegedüs <[email protected]> wrote:

> Hi,
>
>
> plase note, this is a CRS question, not ModSecurity.
>
> There is a dedicated mailing list for the rule set:
>
> https://groups.google.com/a/owasp.org/g/modsecurity-core-rule-set-project
>
> On Wed, Mar 10, 2021 at 11:21:14AM +0530, Blason R wrote:
> > Hi Team,
> >
> > I am really looking at everywhere but unable to find the exact
> information.
> > I am struggling to find how do I increase Paranoia level gradually?
> > I really dont see settings in configuration or might have overlooked? but
> > can someone can help me understanding the procedure?
>
> take a look to your crs-setup.conf:
>
> https://github.com/coreruleset/coreruleset/blob/v3.4/dev/crs-setup.conf.example#L176-L182
>
> The default PL is 1:
>
>
> https://github.com/coreruleset/coreruleset/blob/v3.4/dev/rules/REQUEST-901-INITIALIZATION.conf#L100-L107
>
> this means if user doesn't give any explicit value in the setup,
> then this rule sets up it to 1.
>
> Just uncomment the lines in your setup, and set the necessary
> value in rule 900000. Before that action, you can find a small
> summary about paranoia levels.
>
>
> hth,
>
>
> a.
>
>
>
> _______________________________________________
> mod-security-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/
>

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/