[mod-security-users] Error 500 in all sites.

[Alberto F. <alb...@ba...>]

Hello, im testing your apache module and works good, but in a site with PHPNuke not works, cause error 500 every time if a post a news, or reading the module of forums, can u help me?

This is my configuration:

<IfModule mod_security.c>
    SecFilterEngine On
    SecAuditEngine RelevantOnly
    SecAuditLog logs/audit_log
    SecFilterScanPOST On
    SecFilterDefaultAction "deny,log,status:500"
    SecFilter /etc/passwd
    SecFilter /etc/shadow
    SecFilter /etc/exim.conf
    SecFilter httpd.conf
    SecFilter /tmp
    SecFilter /bin/ls
    SecFilter /bin/cp
    SecFilter /bin/bash
    SecFilter /bin/cd
    SecFilter /usr/sbin/chroot
    SecFilter /bin/ps
    SecFilter /usr/bin/perl
    SecFilter /bin/sh
    SecFilter /usr/bin/gcc
    SecFilterSelective ARG_p "/bin/ls"
    SecFilter "\.\./"
    SecFilter "<[[:space:]]*script"
    SecFilter "<(.|\n)+>"
    SecFilter "delete[[:space:]]+from"
    SecFilter "insert[[:space:]]+into"
    SecFilter "select.+from"
    SecFilter "perl[[:space:]]"
    SecFilter "cat[[:space:]]"
    SecFilter "gcc[[:space:]]"
    SecFilter "mkdir[[:space:]]"
</IfModule>



-- 
--------------------------
     Alberto Ferrer
  alb...@ba...
 http://www.barrahome.org
JID: alb...@da...
--------------------------
SNMP = Security? Not My Problem!