castletonroad
Posts: 135
Joined: Sat Jul 25, 2015 11:23 pm

Modsecurity & Nextcloud

Mon Jun 08, 2020 7:36 am

Hi All,

Has anyone managed to get ModSecurity working successfully with Nextcloud (and Apache), so as to allow unrestricted file size uploads?

I’m running Nextcloud 18.0.5 on Raspbian Buster with Apache/2.4.38.

I have ModSecurity working with OWASP ModSecurity Core Rule Set ver.3.2.0 and I have installed the NextCloud .conf files (REQUEST-903.9003-NEXTCLOUD-EXCLUSION-RULES.conf & REQUEST-903.9012-NEXTCLOUD-EXCLUSION-RULES.conf) from OWASP ModSecurity Core Rule Set ver.3.1.0.

I regularly up/download GB+ files, and I just can’t get it to allow me to do this, regardless of what I set SecRequestBodyLimit or SecRequestBodyNoFilesLimit to.

Basically, unless I can resolve this, I can't run ModSecurity.

Thanks very much.
Raspberry Pi 4 Model B | Raspberry Pi 3 Model B | Raspberry Pi 2 Model B

Return to “Networking and servers”