ModSecurity

: Hosting Definitions; AAAA Records; Access Log Manager; Additional RAM; Administration Services; Advanced Tools; Email Aliases; Antivirus Protection; APC; 1 Click Applications Installer; Auto-responder Emails; Browsable Daily Backups; Catch-all Emails; CentOS; Live Chat Support; ClientExec Billing And Support Software; Genuine Cloud Architecture; CNAME Records; Hosting Control Panel; Hardware; CPanel Control Panel; CPU Share; Cron Jobs; Custom Error Pages; MX And A Records; Daily Data Back-up; Data Centers; Data Compression; Debian; Server Network Hardware; DirectAdmin Control Panel; Disk Space; Domain Backorders; DomainKeys Identified Mail; Domain Manager; Parked Domains; Domain Registration Transfer; Dreamweaver Compatibility; Dropbox Backups; Email Forwarding; Email Manager; Enom Domain Name Reseller Account; EPP Transfer Protection; Error Log Viewer; Extensive Online Documentation; Extra Dedicated IPs; File Manager; FTP Accounts; FTP Manager; DNS Management; WHOIS Management; Guaranteed RAM; Hepsia Control Panel; Hosted Domains; Hotlink Protection; Htaccess Generator; WHOIS Protection; Imagemagick And GD Library; InnoDB; Installation And Troubleshooting; Instant Account Activation; Integrated Ticketing System; IonCube; IP Blocking; JailHost; Email Accounts; Mailing Lists; Mailing List Members; Managed Services Package; Marketing Tools; Money Back Guarantee; Memcached; Microsoft Frontpage Extensions; ModSecurity; Monitoring And Rebooting; MySQL And Load Stats; 2.5 Gbit Network Connectivity; Data Corruption; Node.js; No Overselling; NS Records; One-Hour Response Guarantee; Perl Modules; Password Protected Directories; Perl Scripting; PgSQL Databases; PgSQL Database Storage; Phone Support; PHP 4 And PHP 5 Support; PhpMyAdmin; PhpPgAdmin; Python; RAID; Registrar Lock; Server Reselling Options; Server Side Includes; Shared SSL IP; SiteMap Generator; SMTP Server; Spam Filters; SPF Protection; MySQL Databases; MySQL Database Storage; SRV Records; Data Caching; SSL Certificate Generator; Stable Linux With Apache; Subdomains; Help Desk; Data Traffic; TXT Records; Ubuntu; UPS And Diesel Back-up Generator; Service Uptime Guarantee; URL Redirector; Varnish; VPN Traffic; Multiple Control Panels; Setup Fee; Multiple OS; Full Root-level Access; SSH Telnet; Web Accelerators; Online Site Builder; Web And FTP Statistics; Web Installer; Webmail; Assisted Website Migration; Website Manager; Free Website Templates; Weekly Backup; Weekly OS Update; Zend Optimizer; ZFS Mails And MySQL; Join us

ModSecurity is a plugin for Apache web servers that functions as a web application layer firewall. It's employed to prevent attacks toward script-driven sites by employing security rules that contain specific expressions. This way, the firewall can block hacking and spamming attempts and preserve even websites which are not updated often. For instance, multiple unsuccessful login attempts to a script administrative area or attempts to execute a certain file with the objective to get access to the script shall trigger particular rules, so ModSecurity will stop these activities the second it identifies them. The firewall is quite efficient because it tracks the entire HTTP traffic to a site in real time without slowing it down, so it will be able to prevent an attack before any damage is done. It additionally keeps a very detailed log of all attack attempts that contains more info than traditional Apache logs, so you can later check out the data and take further measures to enhance the security of your sites if necessary.

ModSecurity in Shared Website Hosting

ModSecurity is offered with every single shared website hosting package which we offer and it is activated by default for every domain or subdomain which you include through your Hepsia Control Panel. In case it interferes with any of your apps or you'd like to disable it for some reason, you'll be able to do this through the ModSecurity area of Hepsia with simply a mouse click. You may also enable a passive mode, so the firewall will identify potential attacks and keep a log, but will not take any action. You can view extensive logs in the same section, including the IP address where the attack originated from, what exactly the attacker attempted to do and at what time, what ModSecurity did, etc. For max safety of our clients we use a group of commercial firewall rules combined with custom ones that are added by our system administrators.

ModSecurity in Semi-dedicated Hosting

ModSecurity is a part of our semi-dedicated hosting plans and if you choose to host your Internet sites with our company, there shall not be anything special you'll have to do given that the firewall is activated by default for all domains and subdomains that you add via your hosting CP. If necessary, you could disable ModSecurity for a given Internet site or turn on the so-called detection mode in which case the firewall shall still operate and record data, but will not do anything to stop potential attacks against your Internet sites. In depth logs will be available in your Control Panel and you shall be able to see what type of attacks took place, what security rules were triggered and how the firewall handled the threats, what IP addresses the attacks originated from, etc. We use 2 sorts of rules on our servers - commercial ones from a firm which operates in the field of web security, and customized ones that our administrators sometimes include to respond to newly identified threats in a timely manner.

ModSecurity in VPS Web Hosting

ModSecurity comes with all Hepsia-based virtual private servers which we offer and it shall be switched on automatically for any new domain or subdomain which you include on the hosting server. This way, any web app you install shall be secured right from the start without doing anything personally on your end. The firewall could be managed through the section of the CP that has the same name. This is the place in whichyou could disable ModSecurity or activate its passive mode, so it won't take any action towards threats, but shall still keep a detailed log. The recorded data is available within the same area as well and you will be able to see what IPs any attacks came from to enable you to stop them, what the nature of the attempted attacks was and in accordance with what security rules ModSecurity reacted. The rules that we use on our servers are a mixture between commercial ones that we get from a security company and custom ones which are added by our administrators to maximize the security of any web applications hosted on our end.

ModSecurity in Dedicated Servers Hosting

ModSecurity is offered by default with all dedicated servers which are set up with the Hepsia Control Panel and is set to “Active” automatically for any domain which you host or subdomain you create on the web server. In the event that a web application doesn't work properly, you may either turn off the firewall or set it to function in passive mode. The second means that ModSecurity shall maintain a log of any possible attack which may occur, but will not take any action to prevent it. The logs generated in active or passive mode shall provide you with more details about the exact file which was attacked, the nature of the attack and the IP it came from, etc. This data will permit you to decide what measures you can take to improve the protection of your sites, for instance blocking IPs or performing script and plugin updates. The ModSecurity rules which we use are updated regularly with a commercial pack from a third-party security provider we work with, but oftentimes our admins include their own rules too if they find a new potential threat.