• Hi, Pleskians! We are running a UX testing of our upcoming product intended for server management and monitoring.
    We would like to invite you to have a call with us and have some fun checking our prototype. The agenda is pretty simple - we bring new design and some scenarios that you need to walk through and succeed. We will be watching and taking insights for further development of the design.
    If you would like to participate, please use this link to book a meeting. We will sent the link to the clickable prototype at the meeting.
  • Our UX team believes in the in the power of direct feedback and would like to invite you to participate in interviews, tests, and surveys.
    To stay in the loop and never miss an opportunity to share your thoughts, please subscribe to our UX research program. If you were previously part of the Plesk UX research program, please re-subscribe to continue receiving our invitations.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.

Resolved Website not showing up

DigitalSplendid

Regular Pleskian
Server operating system version
18.0.53
Plesk version and microupdate number
Web Admin Se Edition
The website digitalsplendid.agency showing 403 error. I have renamed plugin and themes directory but that did not help.

1691155920652.png

1691155955240.png
 
The issue is resolved by turning Web application firewall mode off.
@DigitalSplendid

It is NOT recommended to turn off the Web Application Firewall.

As an alternative, one could use the (less restrictive) ruleset from Comodo.

As another alternative, one could tweak the OWASP rules - not the rules themselves, but add some exclusions, as @Maarten. pointed out.

However, in some cases, OWASP CRS has exclusion sets for specific programs - for instance, there is an exclusion set for WordPress.

I would suggest that you start with Comodo ruleset, keep track of the modsec_audit.log file and - if necessary - activate the more strict OWASP ruleset.

Kind regards....
 
Back
Top