300079::yes::This rule alerts on any post that contains more than 4 URLs. Please do not report forum posts with 4 or more URLs as false positives.  Please see this URL before you report this as a false positive https://www.atomicorp.com/wiki/index.php/WAF_300079.  Have you confirmed this is not a forum post and it does not have more than 4 URLs in the post?
300023::yes::This rule alerts on any post that contains more than 4 URLs. Please do not report forum posts with 4 or more URLs as false positives.  Please see this URL before you report this as a false positive https://www.atomicorp.com/wiki/index.php/WAF_300023.  Have you confirmed this is not a forum post and it does not have more than 4 URLs in the post?
330036::yes::If you wish to allow this user agent on your system, please disable this rule.  If you are unsure, please see this URL before you report this as a false positive https://www.atomicorp.com/wiki/index.php/WAF_330036.  Do you still wish to report this as incorrectly identifying this user agent?
333515::yes::If you wish to allow this user agent on your system, please disable this rule.  If you are unsure, please see this URL before you report this as a false positive https://www.atomicorp.com/wiki/index.php/WAF_330036.  Do you still wish to report this as incorrectly identifying this user agent?
330040::yes::Please see this URL before you report this as a false positive https://www.atomicorp.com/wiki/index.php/WAF_330040.  Have you reviewed this article?
330790::no::This is not a false positive.  Apache has generated the error "Invalid URI".  This means that apache, and not ASL, is preventing this content from being served because Apache believes the request to be invalid.  This is not caused by ASL.  ASL is simply reporting that Apache is doing this. Please see this URL for more information https://www.atomicorp.com/wiki/index.php/WAF_330790 
330791::yes::Please see this URL before you report this as a false positive https://www.atomicorp.com/wiki/index.php/WAF_330791.  Have you reviewed this article?
330792::yes::This is NOT a false positive.  This is caused by the client not sending a complete multi part message to the server.  Please see this URL for guidance: https://www.atomicorp.com/wiki/index.php/WAF_330792.   Are you sure you want to report this as a false positive?
331032::no::This is not a false positive.  Please see this article for guidance on this rule:  https://www.atomicorp.com/wiki/index.php/WAF_331032
350000::no::Please see this URL to report this as a false positive https://www.atomicorp.com/wiki/index.php/WAF_350000
60117::no::Please see this URL to report this as a false positive https://www.atomicorp.com/wiki/index.php/WAF_350000
351000::no::Please send us the file, password encrypted, via email to support@atomicorp.com.
377777::no::Please see this URL to report this as a false positive https://www.atomicorp.com/wiki/index.php/WAF_377777
380800::no::This is not a false positive.  Please see this URL for additional information: https://www.atomicorp.com/wiki/index.php/WAF_380800
381206::yes::This is not a false positive.  Please see this article for advice on this issue.  https://www.atomicorp.com/wiki/index.php/WAF_381206
388000::yes::If you wish to allow this on your system, please disable this rule.  If you are unsure, please see this URL before you report this as a false positive https://www.atomicorp.com/wiki/index.php/WAF_388000.  Do you still wish to report this?
390581::yes::This may not be a false positive.  If you wish to allow this on your system, please disable this rule.  If you are unsure, please see this URL before you report this as a false positive  https://www.atomicorp.com/wiki/index.php/WAF_390581.  Do you still wish to report this rule as incorrectly identifying this?
390582::yes::This may not be a false positive.  If you wish to allow this on your system, please disable this rule.  If you are unsure, please see this URL before you report this as a false positive  https://www.atomicorp.com/wiki/index.php/WAF_390582.  Do you still wish to report this rule as incorrectly identifying this?
390583::yes::This may not be a false positive.  If you wish to allow this on your system, please disable this rule.  If you are unsure, please see this URL before you report this as a false positive  https://www.atomicorp.com/wiki/index.php/WAF_390583.  Do you still wish to report this rule as incorrectly identifying this?
390584::yes::This may not be a false positive.  If you wish to allow this on your system, please disable this rule.  If you are unsure, please see this URL before you report this as a false positive  https://www.atomicorp.com/wiki/index.php/WAF_390584.  Do you still wish to report this rule as incorrectly identifying this?
390586::yes::This may not be a false positive.  If you wish to allow this on your system, please disable this rule.  If you are unsure, please see this URL before you report this as a false positive  https://www.atomicorp.com/wiki/index.php/WAF_390586.  Do you still wish to report this rule as incorrectly identifying this?
390587::yes::This may not be a false positive.  If you wish to allow this on your system, please disable this rule.  If you are unsure, please see this URL before you report this as a false positive  https://www.atomicorp.com/wiki/index.php/WAF_390587.  Do you still wish to report this rule as incorrectly identifying this?
397678::no::This is not a false positive.  This is an attempt to access an insecure BackupBuddy backup - disable this rule if you want to allow insecure downloads of BackupBuddy backups.  Please see this URL for additional information:  https://www.atomicorp.com/wiki/index.php/WAF_397678
40113::no::Please send us the file(s), password encrypted, via email to support@atomicorp.com.
52502::yes::Please send the file you are reporting as a false positive to support@atomicorp.com.  Make sure you encrypt the file so that it will not be stopped by any antivirus software.
60119::no::This is not a false positive.  This is a bulk counter event for multiple WAF blocks in succession.
60125::no::This is not a false positive.  The request could not be understood by the server due to malformed syntax. 
60128::no::This is not a false positive.  ASL is reporting that your webserver is denied a request.  ASL does not cause this denial.
60133::no::This is not a false positive.  The request to your web server timed out.  This is an error from your webserver and is not generated by ASL.  ASL is just reporting this error from your webserver.
60126::no::This is not a false positive.  ASL is reporting that your webserver is denied a request.  ASL does not cause this denial.
60139::no::This is not a false positve. Apache has generated the error. This means that apache, and not ASL, is reporting that a URI is too long and apache is preventing this content from being served.
60141::no::This is not a false positve. Apache has generated the error. This means that apache, and not ASL, is preventing this content from being served.
60205::no::This is not a false positive.  The DoS protection system has detected a high volume of connections from the IP listed.  Please see the ASL DOS page for documentation https://www.atomicorp.com/wiki/index.php/DOS_protection
60819::no::This is not a false positve. Apache has generated the error. This means that apache, and not ASL, is reporting: The server, while acting as a gateway or proxy, did not receive a timely response from the upstream server.
60816::no::This is not a false postive. Apache has has encountered an unexpected condition which prevented it from fulfilling the request. 
20101::no::This is not a false positive.  ASL is alerting you that you have a third party IDS installed on your system that has blocked an action.  Please see this page for additional documentation:  https://www.atomicorp.com/wiki/index.php/HIDS_20101
20100::no::This is not a false positive.  ASL is alerting you that you have a third party IDS installed on your system that has blocked an action.  Please see this page for additional documentation:  https://www.atomicorp.com/wiki/index.php/HIDS_20100
20152::no::This is not a false positive.  ASL is alerting you that you have a third party IDS installed on your system that has blocked an action.  Please see this page for additional documentation:  https://www.atomicorp.com/wiki/index.php/HIDS_20152
30105::no::This is not a false positive.  ASL is alerting you that your server is preventing access to a file, ASL does not cause this.  Please see this page for additional documentation:  https://www.atomicorp.com/wiki/index.php/HIDS_30105
550::no::This is not a false positive.  ASL is alerting you that a file has changed on your system.  Please see this URL for additional information: https://atomicorp.com/wiki/index.php?title=HIDS_550
551::no::This is not a false positive.  ASL is alerting you that a file has changed on your system.  Please see this URL for additional information: https://atomicorp.com/wiki/index.php?title=HIDS_551
552::no::This is not a false positive.  ASL is alerting you that a file has changed on your system.  Please see this URL for additional information: https://atomicorp.com/wiki/index.php?title=HIDS_552
553::no::This is not a false positive.  ASL is alerting you that a file has changed on your system.  Please see this URL for additional information: https://atomicorp.com/wiki/index.php?title=HIDS_553
390552::no::This is not a false positive.  Please see this URL for additional information: https://www.atomicorp.com/wiki/index.php/WAF_390552
4151::no::This is not a false positive.  This means that you have configured your firewall to block access to this port.  Please see this URL for additional information on this alert:  https://atomicorp.com/wiki/index.php?title=HIDS_4151
380801::no::This is not a false positive.  Please see this URL for additional information: https://www.atomicorp.com/wiki/index.php/WAF_380801
30155::no::This is not a false positive.  Please see this URL for additional information: https://www.atomicorp.com/wiki/index.php/HIDS_30155
393134::no::This is not a false positive.  Please see this URL for additional information: https://www.atomicorp.com/wiki/index.php/WAF_393134
5114::no::This is not a false positive.  Please see this FAQ for additional information: https://www.atomicorp.com/wiki/index.php/ASL_FAQ#modprobe:_FATAL:_Error_inserting_somemodule_.28.2Fpath.2Fto.2Fmodule.ko.29:_Operation_not_permitted
30112::no::This is not a false positive.  This alert simply means someone has attempted to access a non-existent file on your system. 
330094::no::This is not a false positive.  Please see this URL for additional information: https://www.atomicorp.com/wiki/index.php/WAF_330094
390702::no::This is not a false positive.  Please see this URL for additional information: https://www.atomicorp.com/wiki/index.php/WAF_390702
60133::no::This is not a false positive.  This means the request timed out.  ASL does not and can not cause this.  ASL is just reporting that a request timed out.
60138::no::This is not a false positive.  Please see this URL for additional information:  https://www.atomicorp.com/wiki/index.php/ASL_FAQ#ModSecurity:_Request_body_.28Content-Length.29_is_larger_than_the_configured_limit
60126::no::This is not a false positive.  This means that apache has denied the request because authentication is required.  ASL does not and can not cause this, it is simply reporting this.
392301::no::This is not a false positive.  Please see this URL for additional information: https://www.atomicorp.com/wiki/index.php/WAF_392301
30220::no::This is not a false positive.  Please see this URL for additional information: https://www.atomicorp.com/wiki/index.php/HIDS_30220
330039::yes::This may not be a false positive.  If you wish to allow this on your system, please disable this rule.  If you are unsure, please see this URL before you report this as a false positive  https://www.atomicorp.com/wiki/index.php/WAF_330039  Do you still wish to report this rule as incorrectly identifying that your client is using the libwww-perl user-agent?
309925::yes::This may not be a false positive.  This rule detects fake user-agents, malicious software and worms.  Please read this wiki page before you report this as a false positive: https://www.atomicorp.com/wiki/index.php/WAF_309925.  Have you confirmed that the User-Agent string corresponds to a legitimate software package, and that this session was legitimate?
390616::yes::This is not be a false positive.  This rule detects when a POST is missing the Content-Length header.  Please read this wiki page before you report this as a false positive: https://www.atomicorp.com/wiki/index.php/WAF_390616.
303937::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
303833::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
303800::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
303801::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
303802::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
303803::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
303804::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
303805::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
303806::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
303807::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
303808::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
303810::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
303811::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
303812::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
303813::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
303814::yes::Please do NOT report this as a false positive if you are using a proxy, CDN or other similar service and your web server is not setup per this article:  https://www.atomicorp.com/wiki/index.php/Proxy  Is your proxy setup per this article to log the source IP, and not the proxy IP?
331030::no::This is not a false positive.  Please see this article for advice on this issue:  https://www.atomicorp.com/wiki/index.php/WAF_331030
64210::no::This is not a false positive.  Please see this article for advice on this issue:  https://www.atomicorp.com/wiki/index.php/WAF_331030
330131::yes::This is probably not a false positive.  Please see this article for advice on this issue:  https://www.atomicorp.com/wiki/index.php/WAF_330131  Have you read this article, and confirmed that this client is legitimate?
31102::no::This is not a false positive.  Your system has hit your READ limit for apache.  Please see this article for advice on this issue:  https://www.atomicorp.com/wiki/index.php/HIDS_31102
30117::no::This is not a false positive.  Your system has hit the limit apache sets for the length of a URL.  Please see this article for advice on this issue: https://www.atomicorp.com/wiki/index.php/HIDS_30117
5905::no::This is not a false positive.  Please see this article for information. https://www.atomicorp.com/wiki/index.php/HIDS_5905
3913::no::This is not a false positive.  Please see this article for information. https://www.atomicorp.com/wiki/index.php/HIDS_3913
390700::yes::This is likely not a false positive.  Please see this article for information. https://www.atomicorp.com/wiki/index.php/WAF_390700 before reporting this rule.  
60027::no::This is not a false positive.  Please see this article for information and solutions.  https://www.atomicorp.com/wiki/index.php/ASL_error_messages#denied_RWX_mmap_of
365903::no::This is not a false positive.  This rule is triggered based on your local settings.  Please see this this URL for documentation https://www.atomicorp.com/wiki/index.php/ASL_WAF#MODSEC_01_DOMAIN_BLOCKS
332139::no::This is not a false positive.  This rule is triggered if you are using libcurl.  If you wish to use libcurl, please disable this rule.
360215::no::This is not a false positive.  This rule is triggered if you are using FDM.  If you wish to use FDM, please disable this rule.
340361::no::This is not a false positive.  This rule is triggered if you are using the CONNECT HTTP method.  If you wish to use the CONNECT HTTP, please disable this rule.
360991::no::This is not a false positive.  This rule is triggered by your custom blacklist, if you wish to allow this IP, remove it from your custom blacklist.
