• We value your experience with Plesk during 2024
    Plesk strives to perform even better in 2025. To help us improve further, please answer a few questions about your experience with Plesk Obsidian 2024.
    Please take this short survey:

    https://pt-research.typeform.com/to/AmZvSXkx
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Resolved Website not showing up

DigitalSplendid

Regular Pleskian
Server operating system version
18.0.53
Plesk version and microupdate number
Web Admin Se Edition
The website digitalsplendid.agency showing 403 error. I have renamed plugin and themes directory but that did not help.

1691155920652.png

1691155955240.png
 
The issue is resolved by turning Web application firewall mode off.
@DigitalSplendid

It is NOT recommended to turn off the Web Application Firewall.

As an alternative, one could use the (less restrictive) ruleset from Comodo.

As another alternative, one could tweak the OWASP rules - not the rules themselves, but add some exclusions, as @Maarten. pointed out.

However, in some cases, OWASP CRS has exclusion sets for specific programs - for instance, there is an exclusion set for WordPress.

I would suggest that you start with Comodo ruleset, keep track of the modsec_audit.log file and - if necessary - activate the more strict OWASP ruleset.

Kind regards....
 
Back
Top