Quoting Jason Haar <Jason.Haar@...>:
> On 07/28/2010 12:17 PM, thomas@... wrote:
>> I am having similar problems with tx.max_num_args and such. I just
>> cannot set these variables for some reason.
> I got hit by the same issue - I'm guessing you didn't replace
> modsecurity_crs_10_config.conf with the new one. The scoring system is
> fundamentally different, so you need to start from scratch again. Move
> all the old rules out, install the current version, and then edit the
> "fresh" modsecurity_crs_10_config.conf,modsecurity_local.conf,etc to
> match your old versions.
I have a completely fresh setup, just from scratch.
I tried now different things. I enabled debug logging level 9 - the
config is actually read and the variables are read.
I put my SecDefaultAction back to the default, ie. pass.
I enabled the other rules now for num_args for example and I have more
warnings in the log now, but it doesnt show that the values I am
setting are actually active.
Many thanks anyway.