[Modsecurity] Some initial Problems
AK-Palme
ak-palme at ak-palme.de
Mon Nov 5 12:02:37 EST 2007
Hi,
I am new to mod-security. I am using apache2 with mod-security2 on
Debian. I downloaded the rulesets from
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/rules.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/jitp.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/useragents.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/blacklist.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/blacklist2.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/apache2-rules.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/rootkits.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/exclude.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/recons.conf...
and first all websites stopped working until I disabled
SecRule REQUEST_PROTOCOL "!^HTTP/(0\.9|1\.0|1\.1)$"
"id:340000,severity:1,msg:'Bad HTTP Protocol'"
To use the MediaWiki I had to disable several rules, too.
I wonder if I am the only one with this errors or if the project is not
maintained anymore. Because the rules-files on the Server are almose 1
year old, too..
Greetings,
AK-Palme
More information about the Modsecurity
mailing list