Modsecurity tools: Ability to ignore specific rule ID's per user account
Currently cPanel's Modsecurity tools only allow for disabling:
- Rule ID's server-wide
- Modsecurity entirely for a given user account's domain(s)
It would be helpful to be able to ignore specific rule ID's on a per-account basis, so that if a particular rule is causing issues with a single account's CMS, for example, you don't have to chose between:
- Removing the security of a particular rule for all server users because it causes issues for a single account
- Removing the protections of Modsecurity entirely for a given account just because a single rule has proved problematic
Any exposed UI for ignoring Modsecurity rule ID's per-account/domain would ideally be accessible both within WHM and cPanel.
Thanks for making a great product and for your consideration of this feature!