ModSecurity. Upload Scanner files.

Statskij

Active Member
#1
Hello.
I use litespeed ver.4.0.12 Ent.
And ModSecurity rule doesn't work:

SecUploadFileMode 0644
SecRule FILES_TMPNAMES "@inspectFile /etc/cxs/cxscgi.sh" \
"id:351000,rev:1,severity:2,msg:'Atomicorp.com Upload Malware Scanner:
Malicious File upload attempt detected and blocked',log,deny,auditlog,status:403,t:none"

that means that there is no files audit when they are downloading.
Is it possible to adjust the rule in Configuration --> Server --> Request Filter or to use another way?
Please give a hint.
 
Top