Error While Installing Extensions Blocked by Firewall

[XAMI]

Hai. Trying to install extension through Magento Connect 2.0

I'm using version 1.9.3.2

Now unable to access the page, admin and front end. Asked the hosting guy to unblock my IP but it blocked again when try to install extension.

Please, any help much appreciated.

Following is from the server log :

[Mon Feb 13 11:09:17.605262 2017] [:error] [pid 50944] [client 1.9.100.198] ModSecurity: Access denied with redirection to http://mydomain using status 302 (phase 2). Match of "beginsWith %{request_headers.host}" against "TX:1" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP/rules/REQUEST-31-APPLICATION-ATTACK-RFI.conf"] [line "30"] [id "950120"] [rev "3"] [msg "Possible Remote File Inclusion (RFI) Attack: Off-Domain Reference/Link"] [data "Matched Data: http://connect20.magentocommerce.com/community/mppsfound within TX:1: connect20.magentocommerce.com/community/mpps"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "Host: mydomain"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-remote file inclusion"] [tag "OWASP_CRS/WEB_ATTACK/RFI"] [hostname "mydomain"] [uri "/downloader/index.php"] [unique_id "WKEjXX60dXVnZTJbVKYPdwAAAAM"]

[Sinisa · Accepted solution]

You should reach to your technical support of the hosting because it's block because of their rules and server configuration. I see that they are using OWASP rules for detection of "zero-day" issues, which sometimes can be too restrictive.

Workaround for you, if they do not want to help you (in which case you should leave them), is to download extension via http://freegento.com/ddl-magento-extension.php and to install it manually by copying files via FTP and clearing the cache afterwards.

[XAMI]

Thanks Sinisa for the advice. But my hosting refused to create white list or customize the OWASP rules. So I decided to switch to OC instead. Save the headache

---