Re: [mod-security-users] Content-Length

[Brian R. <Bri...@br...>]

Alexandre NEY wrote:
> Hello everyone !
> 
>  
> 
> I’m trying to boost the size of a certain security rule in mod sec but I
> can’t seem to find it, this is the error I get :
> 
>  
> 
> [10/Feb/2009:14:06:53 +0100]
> [www.xxxxx.org/sid#81b8a48][rid#82bc6b0][/admin/admin_contenu.asp][1]
> Output filter: Content-Length (10296891) over the limit (10000000)
> 
>  
> 
> I have modified  /etc/modsecurity2/modsecurity_crs_10_config.conf to
> 
>  
> 
> SecResponseBodyLimit 20000000
> 
>  
> 
> But that didn’t work, does anyone know how I could prevent my webpage to
> get blocked ?
> 
>  
> 

That is the setting you want.  Make sure it is not being overridden
somewhere else (grep -R SecResponseBodyLimit /etc/modsecurity2) and that
you have reloaded the Apache config.  Another quick way to check that
that directive is being loaded by putting in a syntax error on the next
line and making sure Apache sees the error.

-B

-- 
Brian Rectanus
Breach Security