How i disable mod security for a domain or dir??

[ryo hazuky]

(03-31-2009 12:23 AM)kilburn Wrote:  It didn't work in the roundcube case because it is running under the panel's VirtualHost which prevents overriding any options through .htaccess:
/etc/apache2/sites-enabled/00_master.conf

Code:

...
    <Directory /var/www/ispcp/gui>
        Options -Indexes Includes FollowSymLinks MultiViews
        AllowOverride None
...

Thus, you can either:

1. 1) Change to AllowOverride All so the .htaccess file becomes actually effective.
2. 2) Add the <IfModule mod_security...</IfModule> block into the above <Directory /var/www/ispcp/gui>...</Directory> block.
   

It's Work, the correct sintax to disable for webmail is
<Directory /var/www/ispcp/gui>
<IfModule mod_security2.c>
SecRuleEngine Off
</IfModule>
Options -Indexes Includes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>

Maybe mod_security is responsable to error 500 on ISPCP to. Mod_sec blocks a script to run and cause timout on the scripts to creates domains, emails....maybe...

sorry for my english...i am from brazil