Issue: Control Panel Login on IPv6 Browser & mod_security1 Blocking

[dataonline.vn]

Hello,

My customer is unable to log in to the control panel at (e.g., https://sv66.dataonline.vn:2222/evo).

We investigated and found two cases:

1. The customer's laptop only has an IPv6 address (their modem is IPv6-only).
2. Some customers are being blocked by this rule in CSF:
   
   <span>123.24.51.39 <span># BFM: mod_security1=52 (VN/Vietnam/-) - Sat Mar 8 18:17:05 2025 </span><br>66.249.64.166 <span># BFM: mod_security1=50 (US/United States/crawl-66-249-64-166.googlebot.com) - Sat Mar 8 19:09:06 2025 </span><br></span>

Please help me fix these two issues.

Thank you!

 

[dataonline.vn]

I have found a way to fix it.

 

[splby]

Hello. There is no AAAA record for your hostname sv66.dataonline.vn. If clients with only ipv6 try to connect by hostname, they will not be able to do so, because there is simply no ipv6 address in DNS

 

[zEitEr]

Hello,

I have found a way to fix it.

This way you completely switched OFF ModSecurity. And this way you did not solve the issue with IPv6 mentioned by the user @splby

 

[dataonline.vn]

Hello,



This way you completely switched OFF ModSecurity. And this way you did not solve the issue with IPv6 mentioned by the user @splby

So is there any way to configure to keep ModSecurity? My customer just clicked on the link https://sv66.dataonline.vn:2222/evo and it was blocked.
This case is independent of the fact that their Laptop only has IPv6

 

[dataonline.vn]

Hello. There is no AAAA record for your hostname sv66.dataonline.vn. If clients with only ipv6 try to connect by hostname, they will not be able to do so, because there is simply no ipv6 address in DNS

I see, I will add IPv6 soon. Thanks
I will add IPv6 soon, I can't use it for this server right now.

 

[zEitEr]

My customer just clicked on the link https://sv66.dataonline.vn:2222/evo and it was blocked.

ModSecurity does not filter access to DirectAdmin. An access to Directadmin can be blocked only by Directadmin and CSF/LFD if the second has LF_DIRECTADMIN="1" set.

Why do you think that your user was blocked as violating ModSecurity rules just by clicking the link? What logs do you have that would make you think so?