<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
I am running mod_security currently on a RHEL 4.6 with php 5.1.2 and MySQL 5.0.18, and Drupal 5.3. <div><br class="webkit-block-placeholder"></div><div>It is possible that this is due to an update from RHEL as we just went from 4.5 to 4.6 with a lot of updates in the last couple of weeks.</div><div><br><div>When I first started using mod_security I had no problems, now all of my Drupal and several of my php sites</div><div>are getting blocked. Here are two sections of my httpd error log showing what I am getting from mod_security.</div><div><br class="webkit-block-placeholder"></div><div><div>[Tue Nov 27 13:48:54 2007] [error] [client 129.186.243.2] ModSecurity: Access denied with code 501 (phase 4). Pattern match "^503$" at RESPONSE_STATUS. [id "70901"] [msg "The application is not available"] [severity "ALERT"] [hostname "<a href="http://www.ag.iastate.edu">www.ag.iastate.edu</a>"] [uri "/scholarships/"] [unique_id "Xu79-YG68i0AACOC7AoAAABB"]</div><div>[Tue Nov 27 13:48:59 2007] [error] [client 129.186.242.10] ModSecurity: Access denied with code 501 (phase 4). Pattern match "^503$" at RESPONSE_STATUS. [id "70901"] [msg "The application is not available"] [severity "ALERT"] [hostname "<a href="http://www.ag.iastate.edu">www.ag.iastate.edu</a>"] [uri "/scholarships/"] [unique_id "X0L2GYG68i0AAEJWOKgAAACi"]</div><div>[Tue Nov 27 13:49:05 2007] [error] [client 129.186.242.10] ModSecurity: Access denied with code 501 (phase 4). Pattern match "^503$" at RESPONSE_STATUS. [id "70901"] [msg "The application is not available"] [severity "ALERT"] [hostname "<a href="http://www.ag.iastate.edu">www.ag.iastate.edu</a>"] [uri "/scholarships/"] [unique_id "X5QZCYG68i0AAHTcX50AAABs"]</div><div>[Tue Nov 27 13:49:10 2007] [error] [client 129.186.243.2] ModSecurity: Access denied with code 501 (phase 4). Pattern match "^503$" at RESPONSE_STATUS. [id "70901"] [msg "The application is not available"] [severity "ALERT"] [hostname "<a href="http://www.ag.iastate.edu">www.ag.iastate.edu</a>"] [uri "/scholarships/"] [unique_id "X@LRMIG68i0AAFkXgpoAAAAY"]</div><div><br class="webkit-block-placeholder"></div></div><div><br class="webkit-block-placeholder"></div><div><div>[Wed Nov 28 10:15:42 2007] [error] [client 129.186.242.3] ModSecurity: Access denied with code 501 (phase 4). Pattern match "^503$" at RESPONSE_STATUS. [id "70901"] [msg "The application is not available"] [severity "ALERT"] [hostname "<a href="http://www.ag.iastate.edu">www.ag.iastate.edu</a>"] [uri "/scholarships/"] [unique_id "glX7AIG68i0AAFd682EAAACi"]</div><div>[Wed Nov 28 10:15:43 2007] [error] [client 129.186.242.3] ModSecurity: Access denied with code 501 (phase 4). Pattern match "^503$" at RESPONSE_STATUS. [id "70901"] [msg "The application is not available"] [severity "ALERT"] [hostname "<a href="http://www.ag.iastate.edu">www.ag.iastate.edu</a>"] [uri "/scholarships/"] [unique_id "glzRH4G68i0AAFxnKyIAAAAI"]</div><div>[Wed Nov 28 10:15:43 2007] [error] [client 129.186.242.3] ModSecurity: Access denied with code 501 (phase 4). Pattern match "^503$" at RESPONSE_STATUS. [id "70901"] [msg "The application is not available"] [severity "ALERT"] [hostname "<a href="http://www.ag.iastate.edu">www.ag.iastate.edu</a>"] [uri "/scholarships/"] [unique_id "gmD2EIG68i0AAF1PXi0AAAA8"]</div><div>[Wed Nov 28 10:15:43 2007] [error] [client 129.186.242.3] ModSecurity: Access denied with code 501 (phase 4). Pattern match "^503$" at RESPONSE_STATUS. [id "70901"] [msg "The application is not available"] [severity "ALERT"] [hostname "<a href="http://www.ag.iastate.edu">www.ag.iastate.edu</a>"] [uri "/scholarships/"] [unique_id "gmQfNYG68i0AAFx8O3UAAABA"]</div><div><br class="webkit-block-placeholder"></div><div>Right now I have to kill mod_security until I either learn how to fix this or get some answer as to why it is doing it so I can make it work.</div><div><br class="webkit-block-placeholder"></div><div>I appreciate any help anyone can offer.</div><div><br><div> <span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><div>Tom</div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 12px/normal Monaco; min-height: 16px; ; font-family: Monaco; font-size: 12px; "><br style="font-family: Monaco; font-size: 12px; "></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font class="Apple-style-span" face="Monaco" size="3"><span class="Apple-style-span" style="font-size: 12px;; font-family: Monaco; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; ">/--------------------------------------------------------------------------</span></span></span></span></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font class="Apple-style-span" face="Monaco" size="3"><span class="Apple-style-span" style="font-size: 12px;; font-family: Monaco; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; ">| Tom Hillson</span></span></span></span></font><font class="Apple-style-span" face="Monaco" size="3"><span class="Apple-style-span" style="font-size: 12px;; font-family: Monaco; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "> </span></span></span></span></font><font class="Apple-style-span" face="Monaco" size="3"><span class="Apple-style-span" style="font-size: 12px;; font-family: Monaco; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; ">Agriculture Computer Services Manager</span></span></span></span></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font class="Apple-style-span" face="Monaco" size="3"><span class="Apple-style-span" style="font-size: 12px;; font-family: Monaco; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; ">|(515) 294-1543</span></span></span></span></font><font class="Apple-style-span" face="Monaco" size="3"><span class="Apple-style-span" style="font-size: 12px;; font-family: Monaco; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "> </span></span></span></span></font><font class="Apple-style-span" face="Monaco" size="3"><span class="Apple-style-span" style="font-size: 12px;; font-family: Monaco; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; ">College of Agriculture</span></span></span></span></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font class="Apple-style-span" face="Monaco" size="3"><span class="Apple-style-span" style="font-size: 12px;; font-family: Monaco; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; ">|</span></span></span></span></font><font class="Apple-style-span" face="Monaco" size="3"><span class="Apple-style-span" style="font-size: 12px;; font-family: Monaco; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "> </span></span></span></span></font><font class="Apple-style-span" face="Monaco" size="3"><span class="Apple-style-span" style="font-size: 12px;; font-family: Monaco; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; ">Iowa State University</span></span></span></span></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font class="Apple-style-span" face="Monaco" size="3"><span class="Apple-style-span" style="font-size: 12px;; font-family: Monaco; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; ">---------------------------------------------------------------------------</span></span></span></span></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font class="Apple-style-span" face="Monaco" size="3"><span class="Apple-style-span" style="font-size: 12px;; font-family: Monaco; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; "><span class="Apple-style-span" style="font-family: Monaco; font-size: 12px; ">|"The only thing I have too much of is too little time"</span></span></span></span></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font class="Apple-style-span" face="Monaco" size="3"><span class="Apple-style-span" style="font-size: 12px;; font-family: Monaco; "><br class="khtml-block-placeholder"></span></font></div></span></span></span></span></div><br></div></div></div></body></html>