Re: [mod-security-users] mod_security 1.8

[Ivan R. <iv...@we...>]

Colin Tinker wrote:
> Hi
> 
> I have just installed the above and get this error:-
> 
> modulesSyntax error on line 44 of /etc/mod_security/mod_security.conf:
> 
> The line is:-
> 
> SecFilterSelective HTTP_Content-Type "!^(|application/x-www-form-urlencoded|
> multipart/form-data)$"
> 
> Does anyone have any idea why as it is part of the default config file.

  Because it appears to work with Apache 1.3.27 and Apache 2.x, but not
  with Apache 1.3.29 (or greater, I think). It complains about the
  expression being empty. Don't know why. I didn't notice it in my
  tests.

  Rewriting that line (of the file) like this:

  SecFilterSelective HTTP_Content-Type
  "!(^$|^application/x-www-form-urlencoded$|^multipart/form-data$)"

  should fix it. I did the same in the configuration in the CVS.

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]