New mod_security rules - resellers

[GatorFord]

We are beginning a rollout of the new mod_security rules we have been testing to our reseller servers beginning tomorrow. We will be updating these across the 50 reseller machines listed below. If you see any issues with 403 forbidden errors for web applications that did not previously have these, it may be related to the mod_security rules. If this is the case please email support AT hostgator.com with the URL you were seeing the issue on and we can correct this for you. The server list follows and I will continue to update this forum post with the machines we are rolling these out to as we continue to migrate these machines :

6/8/2010 rollout :

350z
4runner
abarth
abilene
acadia
accent
acclaim
accord
ace
achieva
acura
admiral
aerio
aerodeck
aerostar
aero
agila
alameda
albany
albea
alero
alfaromeo
allante
alliance
alpina
altezza
alto
amanti
amc
amg
amigo
antara
arena
argenta
aries
arlington
armada
arnage
ascona
aspen
aspire
astonmartin
astra
astre
astro
atenza
athon
atlanta
atos
audi

[GatorFord]

The new mod_security rules have been installed on the 50 resellers outlined in the above post. Again please contact support AT hostgator.com if you begin seeing 403 errors on applications which previously did not. Thank you.

[GatorFord]

Dave also requested that I post some additional information about what we are changing with the mod_security rules, so I'll touch on the changes. The rules we had in place previously were fairly old and while they did catch a good amount of malicious traffic, I feel we can do better. We've decided that an extremely proactive approach to protecting sites for customers possibly exploitable and outdated scripts is the best approach.

What we are doing now is using a combination of some in house custom written mod_security rules as well as rules from a subscription service which releases a number of rules for 0day and other exploits, and we're paring down the rulesets to what we believe are the critical rules and discarding those that cause false positives for customer scripts.

If you have any technical questions about the mod_security rule changes or need further information feel free to PM me and I'll get back with you as soon as I can. Thanks!

[GatorFord]

The following reseller servers now have the new mod_security rules :

aura
aurion
austin
avalanche
avalon
avanti
avenger
aveo
axela
axiom
aztek
azur
baltimore
bangor
barracuda
barrie
batmobile
beetle
bentley
beretta
besta
bismarck
biturbo
blazer
bluebird
bluedevil
bmw
bongo
bonneville
boone
borrego
boss
boston
boulder
boxster
brabus
bravada
bravo
brewer
bronco
brooklands
brougham
bugatti
buick
burlington
cabriolet
cadillac
cairo
cala
caliber

Please let us know if you see any 403 errors coming from applications which did not previously have these. Thank you.

[GatorFord]

The mod_sec rules have been deployed to the following reseller servers at this time :

calibra
california
camaro
campo
camry
canter
canto
caprice
captiva
caravan
carens
carrera
catera
cayenne
cayman
ccx
celebrity
celica
century
cerato
challenger
charger
charleston
charlotte
cheetah
cherokee
cherry
chevelle
chevette
chevy
chicago
chrysler
cimarron
cirrus
citation
city
civic
clearwater
clk
cobalt
cobra
colorado
colt
columbus
comanche
combo
commander
compass
concord
conroe

[GatorFord]

The rules have been rolled out to the following resellers this morning :

consul
continental
contour
cooper
cordoba
corniche
cornwall
corolla
corsa
corsica
corvette
cougar
countach
cressida
croma
crossfire
crown
crv
crx
cts
cube
cutlass
cx7
cyclone
cypress
dacia
daewoo
daihatsu
daimler
dallas
datsun
daytona
dayton
delfino
delorean
delsol
demio
denali
denver
desoto
destin
detroit
deville
diamante
dino
diplomat
doblo
dodge
doniphan
dover

[GatorFord]

The new mod_security rules have been placed on the following machines at this time :

dubreville
ducato
duna
duster
dynasty
eagle
echo
eclipse
edge
edsel
elantra
elan
elcamino
eldorado
eleanor
electra
element
elise
elmore
elpaso
enclave
encore
enzo
eos
epica
equator
equinox
escalade
escape
escort
espanola
espero
esprit
esv
eunos
europa
evanda
evora
evo
excel
excursion
exelero
exige
expedition
explorer
express
ext
f430
fairlady
fairlane

[GatorFord]

Hello,

The rules have been installed on the following machines :

fairmont
falcon
fargo
ferrari
fiat
fiesta
firebird
firehawk
firenza
fit
fleetwood
flex
focus
ford
forester
forte
forza
freestar
fresno
frontier
fusion
g35
g37
gadgetmobile
gainesville
galant
galaxie
gallardo
galloper
galveston
gemini
genesis
georgetown
geo
getz
gladiator
glendale
gli
gmc
golf
grace
grandam
grandnational
grandprix
gremlin
gt2
gt500
gti

[GatorFord]

The mod_security rules have also been applied to the following boxes :

gto
gtr
gwiz
hamilton
hampton
harlingen
hartford
healey
hemi
hershey
hhr
highlander
holden
hollywood
honcho
honolulu
hoover
hornet
houston
hummer
ialta
iconic
impala
impreza
impulse
indy
infiniti
insight
integra
interceptor
intrigue
invicta
ion
isetta
isuzu
jacksonville
jaguar
jalpa
japan1
japan2
jeep
jetta
jimmy
joyce
jupiter
justy
kalos
karif
keylargo
keywest

[GatorFord]

This afternoon the mod_security rules have been deployed to :

kia
kingston
knoxville
lada
lagonda
lakeland
lamborghini
lancer
lanos
lantra
lariat
lasalle
laser
lasvegas
leaf
lebaron
legacy
leganza
legend
leo
lesabre
levin
lexus
lightning
lincoln
linea
london
longbeach
lotus
lubbock
lucerne
lumina
luv
lynx
m45
mach1
mach5
macon
magnum
magnus
malibu
mangusta
marauder
marietta
mariner
marquis
marzal
maserati
matiz
matra

[GatorFord]

matrix
maxima
maybach
mazda
mclaren
memphis
mentor
merak
mercedes
mercury
merkur
mesa
metro
miami
miata
micra
midi
millennia
mini
mirada
mirage
mito
miura
mks
mobile
modelt
modena
modesto
monaco
mondeo
mondial
montecarlo
montego
montgomery
monza
mr2turbo
mr2
mulsanne
multipla
murano
murena
musso
mustang
mx5sql5
mx6
nacogdoches
napa
naples
nashville
navigator

[GatorFord]

The rules have been deployed to the following reseller servers at this time :

neon
neworleans
newyork
ninja
nissan
nitro
norfolk
northbay
nova
nsx
nubira
oakland
oakville
obsidian
ocala
odessa
odyssey
oldsmobile
omaha
omni
opel
orion
orlando
outlook
pacer
pacifica
pagani
panamera
panoz
pantera
paseo
passat
pathfinder
patriot
pensacola
peugeot
phaeton
phantom
philadelphia
phoenix
picanto
pilot
pinto
plano
plymouth
polo
pontiac
porsche
porter
portland

[GatorFord]

The rules have been pushed to the all the resellers at this time. If you're having new 403 errors on applications please contact support AT hostgator.com

Thank you!