https://github.com/esadcetiner/sogo-rule-exclusions-plugin

OWASP CRS 3rd party plugin for SOGo Groupware
https://github.com/esadcetiner/sogo-rule-exclusions-plugin

coraza-waf coreruleset coreruleset-plugin crs-plugin modsecurity sogo

Last synced: 12 days ago
JSON representation

OWASP CRS 3rd party plugin for SOGo Groupware

• Host: GitHub
• URL: https://github.com/esadcetiner/sogo-rule-exclusions-plugin
• Owner: EsadCetiner
• License: gpl-2.0
• Created: 2023-06-21T07:43:10.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2024-11-28T21:06:34.000Z (about 2 months ago)
• Last Synced: 2024-11-28T21:27:10.841Z (about 2 months ago)
• Topics: coraza-waf, coreruleset, coreruleset-plugin, crs-plugin, modsecurity, sogo
• Homepage:
• Size: 78.1 KB
• Stars: 2
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
![Integration tests](https://github.com/EsadCetiner/sogo-rule-exclusions-plugin/actions/workflows/integration.yml/badge.svg)

# SOGo-rule-exclusions-plugin

This plugin contains rule exclusions to fix false positives when using SOGo Groupware with the OWASP Core Rule Set.

## Requirements

- CRS Version 4.0 or newer

- ModSecurity compatable Web Application Firewall

## Installation

For full and up to date instructions on installing plugins, please refer to [How to Install a Plugin](https://coreruleset.org/docs/concepts/plugins/#how-to-install-a-plugin) in the official CRS documentation.

### Conditionally enable plugins for multi-application environments

For full and up to date instructions on how to conditionally enable/disable this plugin on a multisite environment, please refer to [Conditionally enable plugins for multi-application environments](https://coreruleset.org/docs/concepts/plugins/#conditionally-enable-plugins-for-multi-application-environments) in the official CRS documentation.

## Disabling the plugin

The plugin can be disabled by uncommenting rule 9520000 inside ``plugins/sogo-rule-exclusions-config.conf`` or by removing the includes for this plugin.

## Reporting false positives

If you find a false positive that this plugin does not cover then please open a new issue or pull request, if creating an issue then please include the following details:

1. CRS Version

2. ModSecurity/Coraza Version

3. modsec audit logs

4. what caused the false positive