Re: [mod-security-users] Re: Strange error when blocking a petition

[Ivan R. <iv...@we...>]

I can't remember if I replied to this one at the time so I'll
just respond again.


>>>I'm getting the following error from time to time. I'm not running
>>>windows, so I'm not very worried about it, but the
>>>'ap_setup_client_block failed with 400' message doesn't look good. Is it
>>>a problem with my mod_security installation? Or is it normal?
>>>
>>>195.194.x.x - - [24/Mar/2005:00:54:50 +0100] "POST 
>>>/_vti_bin/_vti_aut/fp30reg.dll HTTP/1.1" 500 647 Access denied with code 
>>>500. ap_setup_client_block failed with 400
 >
 > ...
 >
 >>I have a bunch of "/_vti_bin" requests in my error log, but they are all
 >>404.  How did you get a 500 instead of a 404 if they're posting to a dll and
 >>you're not running Windows?

   This is probably with Apache 1.x. It will respond with 400 if
   an attempt to use chunked encoding (and ModSecurity is loaded). The
   same thing will be allowed with Apache 2.x.

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org