Install ConfigServer ModSecurity Control in cPanel

The ConfigServer ModSecurity Management (CMC) is another beneficial feature in which we can manage mod_security rules and configuration from within the WHM panel. CMC is a free add-on product for cPanel that provides a user-friendly web-interface for managing mod_security. Through this mod-security add-on, we can enable or disable mod-security for a selected cPanel account or we can disable any individual rules on a per account or per domain basis. The following are the advantages of ConfigServer ModSecurity Management (CMC):

1) Disable mod_security rules that have unique ID numbers on a global, per cPanel user, or per hosted domain level

2) Disable mod_security completely, also on a global, per cPanel user, or per hosted domain level

3) Edit files containing mod_security configuration settings in /usr/local/apache/conf

4) View the latest mod_security log entries

This feature also helps us to track the log entry for the domain hosted on our server. By doing that, we can understand if any of the rules cause any issues for the domains. So we can disable such rules for the domain through the interface.

I have listed the requirements for this feature below:

1) Apache v2+

2) mod_security v2.5+ installed through EasyApache

3) A set of mod_security rules each of which uses a unique ID

Let us discuss the steps to install ConfigServer ModSecurity Management on a cPanel server.

Step-1:

The first step is to access your server via SSH as the root user and then download the latest version of ConfigServer ModSecurity Management (CMC) and extract the file.

# wget http://www.configserver.com/free/cmc.tgz

# tar -xzf cmc.tgz

Step-2:

Once it is completed, you need to enter the directory and execute the installation script by executing the following commands.

# cd cmc/

# sh install.sh

Once the installation is completed, then you can see the ConfigServer ModSecurity Management administration area through your WHM panel under the section “Plugins”.

Step-3:

If you need to uninstall the plugin, you need to execute the following commands by logging in to your server as the root user.

# cd cmc/

# sh uninstall.sh

If you require any further assistance, please contact our support department.