Re: [mod-security-users] Encoding-Problems

[Ivan R. <iv...@we...>]

Harald Volz wrote:
> Hi
> I am using the last version (1.9.2) and have problems with the german
> "umlaut" and other special charactes in URL and other Headerparts.


> SecFilterCheckUnicodeEncoding On

  SecFilterCheckUnicodeEncoding should be "off" in your case.


> Header Problem 2: strange Agent coming from japanese site....
> Request: ourserver requestor - - [01/Feb/2006:11:18:10 +0100] "GET
> /favicon.ico HTTP/1.0" 302 230 "-" "\xf0\x05\xe1\x07X9\xb
> 5\x05\x08" - "-"
> User-Agent: ð^Eá^GX9µ^
> mod_security-message: Access denied with code 400. Error validating
> header value (User-Agent): Invalid character detected [5]

  This message is not consistent with "SecFilterForceByteRange 1 255",
  ie should not happen. Did you use a different configuration when
  you got that error?

-- 
Ivan Ristic, Technical Director
Thinking Stone, http://www.thinkingstone.com