[mod-security-users] Error 500 in all sites.
Brought to you by:
victorhora,
zimmerletw
|
From: Alberto F. <alb...@ba...> - 2003-11-21 20:58:36
|
Hello, im testing your apache module and works good, but in a site with PHPNuke not works, cause error 500 every time if a post a news, or reading the module of forums, can u help me?
This is my configuration:
<IfModule mod_security.c>
SecFilterEngine On
SecAuditEngine RelevantOnly
SecAuditLog logs/audit_log
SecFilterScanPOST On
SecFilterDefaultAction "deny,log,status:500"
SecFilter /etc/passwd
SecFilter /etc/shadow
SecFilter /etc/exim.conf
SecFilter httpd.conf
SecFilter /tmp
SecFilter /bin/ls
SecFilter /bin/cp
SecFilter /bin/bash
SecFilter /bin/cd
SecFilter /usr/sbin/chroot
SecFilter /bin/ps
SecFilter /usr/bin/perl
SecFilter /bin/sh
SecFilter /usr/bin/gcc
SecFilterSelective ARG_p "/bin/ls"
SecFilter "\.\./"
SecFilter "<[[:space:]]*script"
SecFilter "<(.|\n)+>"
SecFilter "delete[[:space:]]+from"
SecFilter "insert[[:space:]]+into"
SecFilter "select.+from"
SecFilter "perl[[:space:]]"
SecFilter "cat[[:space:]]"
SecFilter "gcc[[:space:]]"
SecFilter "mkdir[[:space:]]"
</IfModule>
--
--------------------------
Alberto Ferrer
alb...@ba...
http://www.barrahome.org
JID: alb...@da...
--------------------------
SNMP = Security? Not My Problem!
|