Search results

the only one way seems to set the rule to low security filtering on global settings, then the message is gone on webmail.domain.com / roundcube

so what to do now? - disable on domain level does not include webmail subdomain - disabled webabb fw globally is not what i want - to apply curstom settings via command line (custom settings text box) does not work either due of using nginx (instead of apache) or inactive/locked (not...

when i disable webapp fw globally (so NOT domain-specific! Which means: on domain settings), the roundcube webmail on webmail.domain.com works.

so message on webmail.domain.com is still present

no, to turn off webapp firewall for one (1) specific domain domain.com does not disabled it for webmail.domain.com

I think the problem is "by design" in Plesk so it should be fixed/solved by the Plesk developer team - right!?

So you see, the domain is locked for some reasons (which means website is not available anymore, but mail system still works) So i think, the apache custom settings will not match anymore when the domain is locked - right? And also because of that the instructions config will result on a error...

with "custom domain settings" i meant that: https://domain.com:8443/smb/web/web-server-settings/id/[DOMAIN_ID]

now i asked ChatGPT for the rules / config instructions... but when i apply them on custom domain settings, i just get an error message

(The rule IDs are useless when i can't apply them in plesk GUI... so i firstly need to know how to apply them before i search for that rule IDs... otherwise, its a waste of time i.m.o...)

There is a list somewhere in the WWW with all rule IDs i have to disable (but i don't have the URL yet, need to search it) - so please just explain me to to apply there rules for domain webmail.domain.com... (on the main domain page, these subdomain does not seems to apply when i configure it on...

Comodo is not an option because the ruleset update fails almost everytime

why?

ok so now i changed to apache based modsec ruleset, not the apache config intrustions was saved but they are red and it still does not work

so i already said, on my plesk server roundcube is NOT on domain.com/webmail - it's on webmail.domain.com. (and no, i changed nothing on default configuration. i don't know on which plesk version roundcube is on /webmail URL path?)

doesn't work so it seems

Thank you very much for your feedback. So: What do i need to add here to exclude OWASP webapp firewall for webmail.domain-a.com, webmail.domain-b.com, webmail.domain-c.com, ...

UPDATE: now i saw that domin.com/roundcube is not present - and also not domain.com/webmail. my system uses webmail.domain.com

this: <LocationMatch "/roundcube/"> SecRuleEngine Off </LocationMatch> https://support.plesk.com/hc/en-us/articles/12377735134743-Webmail-is-not-working-on-a-Plesk-server-when-ModSecurity-with-OWASP-or-Comodo-rule-set-is-enabled-Error-when-communicating-with-the-server

Hmmm... yes, now i disabled the OWASP Webapp firewall on global settings (which means webapp firewall generally disabled) and now it works. So: How to exclude the problematic rules for webmail.domain.com but not for domain.com? And: So it seems, i can't use custom domain settings (on URL...