Disable mod_security via cPanel Modsec Manager
ModSecurity is server software for Apache that comes bundled with cPanel. ModSecurity helps protect your site from brute force attacks and, by default, automatically runs on all accounts. ModSecurity should usually remain on. In certain situations, such as a WordPress admin lockdown caused by brute force attacks, you may need to temporarily deactivate ModSecurity to resolve an issue. The below steps show how to disable ModSecurity in cPanel.
This applies to the latest versions of cPanel (starting in cPanel version 82).
While certain versions of ModSecurity used to allow admins to whitelist specific IP addresses, this feature is no longer supported due to security and performance concerns.
Disable ModSecurity for Individual Domains
- Log into cPanel.
- Choose ModSecurity listed under Security.
- Select the domain you are working with and switch ModSecurity from On to Off.
- Wait for the pop-up telling you that ModSecurity has been disabled.
- Troubleshoot the issue that you are having.
- Return to cPanel and reactivate ModSecurity immediately after solving the issue you are experiencing. If you stop troubleshooting and need to wait before continuing, be sure to reactivate ModSecurity. Do not leave ModSecurity disabled any longer than necessary.
Well done! You now know how to disable ModSecurity through cPanel.
ModSecurity is ready to go when you start with one of our Hosting Plans!
Did you find this article helpful?
Tweet
Comments
Staff 2,342 Points
|
2014-04-14 5:18 pm
If you have disabled mod_security and are still getting a 406 error with it still turned off, you may want to contact technical support with details on how to replicate the issue to further investigate.
|
n/a Points
|
2014-07-09 8:25 am
the article would be correct however mod_security can't be disabled on my site. I keep getting an 'Error disabling mod_security" error
|
Staff 3,713 Points
|
2014-07-09 8:34 am
Hello Jami,
If you are having issues with a ModSecurity rule, and running into issues disabling it. Please be sure to submit a verified ticket explaining the issue you're having so that our system administration team can review that is going wrong that it won't let you disable it. - Jacob |
n/a Points
|
2014-09-12 6:33 am
My website is now completly down after I did this : "WordPress admin access via restricted IP"and then changed Temporarily disable ModSecurity on your account.What do I do ? I cant get to the admin or even view the website? |
Staff 16,266 Points
|
2014-09-12 3:43 pm
Hello Katie,
I checked your site and it seems to be working correctly. I looked in the logs for the ModSecurity errors and saw that the server was having an issue with the images coming from photobucket. The way they come across looks like a possible attack to the server. The other error I saw was just the normal 15 min block occasionally placed due to attempts to log in and failing too many times. Kindest Regards, Scott M |
Help Center Login
Related Questions
Here are a few questions related to this article that our customers have asked:
Ooops! It looks like there are no questions about this page.
Would you like to ask a question about this page? If so, click the button below!
We value your feedback!
There is a step or detail missing from the instructions.
The information is incorrect or out-of-date.
It does not resolve the question/problem I have.
new! - Enter your name and email address above and we will post your feedback in the comments on this page!