Re: [mod-security-users] REQBODY_ERROR

[Reindl H. <h.r...@th...>]

Am 23.11.2015 um 15:19 schrieb Yogesh Patel:
> In modsecurity we have a rule below:
>
> "SecRule REQBODY_ERROR "!@eq 0" \
> "id:'200001', phase:2,t:none,log,deny,status:400,msg:'Failed to parse
> request body.',logdata:'%{reqbody_error_msg}',severity:2"
>
>
> in mod security log following error message is detected:
>
> "Message: Access denied with code 400 (phase 2). Match of "eq 0" against "REQBODY_ERROR" required. [file "D:/tools/Apache2.4.x/conf/extra/highq/modsec/modsecurity.conf"] [line "132"] [id "200001"] [msg "Failed to parse request body."] [data "Error reading request body: Client went away."] [severity "CRITICAL"]
> Action: Intercepted (phase 2)"
>
>
> What could be the possible reason for this error?

Error reading request body: Client went away
sounds pretty clear like a lost connection