[mod-security-users] mod_security-message: Invalid multipart/form-data

[Thai D. <th...@gm...>]

Hi guys,

When I turned SecFilterScanPOST on and tried to send an email with=20
SquirrelMail, mod-sec reported that error. As fas as I know, this error=20
occured due to the fact that SquirrelMail (and many other webmail apps)=20
compose-form has "multipart/form-data" as request encoding even if you dont=
=20
attach files with your email. When mod-sec sees "multipart/form-data", it=
=20
expects to see the long POST_PAYLOAD containing the attachments, and ends u=
p=20
with that error when there is no attachment. The quick solution is...to tur=
n=20
SecFilterScanPOST off :). How about a real solution? Any suggestion?=20

Regards,

Thai Duong.