Re: [mod-security-users] modsecurity causing IIS Applicaiton pool to crash

[Yi Li <yi...@gm...>]

do u really need to inspect response? i also saw u limit response size,
which are hard to control.

SecResponseBodyAccess On



On Sun, Mar 17, 2013 at 11:30 PM, Qiushi Wang <ddt...@ou...> wrote:

> Hi,
>
> I'm using Modsecurity 2.7.2 with Windows server  2008 R2 64bit/IIS
> 7.5/Mysql 5.6/PHP 5.4/Fastcgi/Wordpress. When disabling Modsecurity,
> everything is OK. When enabling Modsecurity, the application pool crashes.
> I saw you fixed a modsecurity.dll issue in 2.7.1. But now is libapr-1.dll
> in 2.7.2. Any idea this is a bug or my config issue? I attached web.config
> and modsec config files.
>
> Application error:
> Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp:
> 0x4ce7afa2
> Faulting module name: libapr-1.dll, version: 1.4.6.0, time stamp:
> 0x502f86ed
> Exception code: 0xc0000005
> Fault offset: 0x0000000000004e21
> Faulting process id: 0xb68
> Faulting application start time: 0x01ce238423787a3e
> Faulting application path: c:\windows\system32\inetsrv\w3wp.exe
> Faulting module path: C:\Windows\system32\inetsrv\libapr-1.dll
> Report Id: 613f3441-8f77-11e2-86f6-005056b85fd5
>
> Br,
> Mark
>
>
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_d2d_mar
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/
>
>