[Modsecurity] Some initial Problems

AK-Palme ak-palme at ak-palme.de
Mon Nov 5 12:02:37 EST 2007


Hi,
I am new to mod-security. I am using apache2 with mod-security2 on
Debian. I downloaded the rulesets from
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/rules.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/jitp.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/useragents.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/blacklist.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/blacklist2.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/apache2-rules.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/rootkits.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/exclude.conf...
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/recons.conf...

and first all websites stopped working until I disabled
SecRule REQUEST_PROTOCOL "!^HTTP/(0\.9|1\.0|1\.1)$"
"id:340000,severity:1,msg:'Bad HTTP Protocol'"

To use the MediaWiki I had to disable several rules, too.

I wonder if I am the only one with this errors or if the project is not
maintained anymore. Because the rules-files on the Server are almose 1
year old, too..

Greetings,
AK-Palme


More information about the Modsecurity mailing list