I am having issues with one of my sites after upgrading to version 1.9.2 of
mod_security. I did not change my mod_security file at all.
The problem: all "virtual" includes (ie: <!--#include virtual="/include/
header.inc" --> ) do not work. No errors are generated in the html that is
exported. No errors are generated in the apache error log. no errors are logged
in the SecAuditLog. If i disable mod_security for this particular vhost
everything works fine.
There is no output (with SecFilterDebugLog set to level 9) that contains
"header.inc" in it.
I am getting this message for "footer.inc" however:
[14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/
include/footer.inc][2] Detection phase starting (request 9b64028): "GET /t.php
HTTP/1.1"
[14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/
include/footer.inc][9] Found msr (9b6a218) in r->main (9bb4488)
[14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/
include/footer.inc][2] sec_check_access: Filtering off, not an initial request
[14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/
include/footer.inc][9] sec_insert_filter: Starting
[14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/
include/footer.inc][9] Found msr (9b6a218) in r->main (9bb4488)
[14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/
include/footer.inc][2] scan_pre: Adding output filter
[14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/
include/footer.inc][3] sec_filter_out: start
[14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/
include/footer.inc][9] Found msr (9b6a218) in r->main (9bb4488)
[14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/
include/footer.inc][3] sec_filter_out: Content-Type = "(null)"
[14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/
include/footer.inc][3] sec_filter_out: got 567 bytes, bufused=0, buflen=16384
when i've done searches for some of these things all i've found are references
back to the source code of mod_security. i am completely baffled by this, have
tried everything i can think of and searched everywhere i can think of. The
fact that there are no errors generated anywhere is what has me completely
confused. Oh, everything works just fine with mod_security 1.8.7.
any help would be very much appriciated.
Thanks
.jeff.
|