Re: [mod-security-users] Strange error when blocking a petition

[Tom A. <tan...@oa...>]

----- Original Message ----- 
From: "Alberto Gonzalez Iniesta" <ag...@in...>
To: <mod...@li...>
Sent: Tuesday, March 29, 2005 11:53 AM
Subject: [mod-security-users] Strange error when blocking a petition


> Hi all,
>
> I'm getting the following error from time to time. I'm not running
> windows, so I'm not very worried about it, but the
> 'ap_setup_client_block failed with 400' message doesn't look good. Is it
> a problem with my mod_security installation? Or is it normal?
>
> 195.194.x.x - - [24/Mar/2005:00:54:50 +0100] "POST 
> /_vti_bin/_vti_aut/fp30reg.dll HTTP/1.1" 500 647 Access denied with code 
> 500. ap_setup_client_block failed with 400

Here's some things that would probably catch this on my system:

SecFilterSelective "HTTP_TRANSFER_ENCODING" "chunked"

SecFilter 
"\.(conf|cf|ini|cfg|htpasswd|htaccess|htgroup|inc|history|bash_history|exe|pwd|cnf|dll)"

I also have this, but I don't recall why:

SecFilter errors/400

I have a bunch of "/_vti_bin" requests in my error log, but they are all 
404.  How did you get a 500 instead of a 404 if they're posting to a dll and 
you're not running Windows?

Tom