modsecurity

[hylobates]

Hello,
I'm experiencing a lot of problems with modsecurity.
In my opinion modsecurity interferes with privacy rules which makes replying or sending with Roundcube almost impossible.
Also websites containing Wordpress are loading very slow.
Obviously modsecurity "reads" the content of my email which is to my opinion not allowed.
I can't believe there are so many illegal content in a site containing Wordpress.
Can anybody please advise me what to do?
Kind Regards

 

[ericosman]

ModSecurity is not sitting there reading your emails with a cup of coffee and judging the contents….

It scans web requests for attack patterns. That may include Roundcube POST data, but that does not magically make it a privacy violation.

And no, it is not detecting “illegal WordPress content” either. If legitimate traffic gets blocked, that is called a false positive, check the logs and tune the rules.

Turning off the firewall because it blocks something is a bit like removing the smoke detector because it beeped while cooking.