Answers.Body: <p>I've often run into trouble with shared hosts' use of ModSecurity, but those that are willing to tweak the rules have always managed to make it work.  Expect to do some testing!</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2022-10-07T13:54:28.490Z
Answers.Text: Jon do you know if there are some generic CiviCRM rules or if it needs to be custom each time?
Answers.UserDisplayName: herb
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2022-10-07T20:23:39.057Z
Answers.Text: @herb I don't know - I've never been the one to make the change. I've wanted to implement mod_security for my own servers for a long time but haven't had time to learn the rule syntax (which is a lot).  Hit me up on Mattermost (@junglebird) if you're trying to implement it yourself, vs. dealing with a webhost! If you ARE dealing with a webhost, you basically need to know which URL is getting blocked, ideally with a date/time when it's happening.  The mod_security log will say which rule caused it.
Answers.UserDisplayName: Jon G - Megaphone Tech
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2020-08-06T18:37:24.283Z
Answers.LastActivityDate: 2020-08-06T18:37:24.283Z
Answers.UserDisplayName: Jon G - Megaphone Tech
Body: <p>I am thinking to add ModSecurity to the server (Wordpress 5.x/Apache2/Ubuntu 18) that is running CiviCRM to further augment the security.  Thought I thought I check on this forum on the experience of doing so and whether it is a good idea.  Thanks for your insights!</p>
  
Tags: <security>
Title: Does ModSecurity and CiviCRM play well together?
ThreadText: # Does ModSecurity and CiviCRM play well together?
  
  (Asked by: username_0 on 2020-08-03)
  
  I am thinking to add ModSecurity to the server (Wordpress 5.x/Apache2/Ubuntu 18) that is running CiviCRM to further augment the security. Thought I thought I check on this forum on the experience of doing so and whether it is a good idea. Thanks for your insights!
  
  **Tags:** security
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2020-08-06. Score: 1 | Accepted answer
  
  I've often run into trouble with shared hosts' use of ModSecurity, but those that are willing to tweak the rules have always managed to make it work. Expect to do some testing!
  
  > **Comments:**
  > **username_2**: Jon do you know if there are some generic CiviCRM rules or if it needs to be custom each time?  
  > **username_1**: @username_2 I don't know - I've never been the one to make the change. I've wanted to implement mod_security for my own servers for a long time but haven't had time to learn the rule syntax (which is a lot).  Hit me up on Mattermost (@junglebird) if you're trying to implement it yourself, vs. dealing with a webhost! If you ARE dealing with a webhost, you basically need to know which URL is getting blocked, ideally with a date/time when it's happening.  The mod_security log will say which rule caused it.  
  
  ---
  
  