Re: [mod-security-users] Problems with SecFilterRemove

[Jeremy M. <jme...@pa...>]

I don't know if this makes a difference, but you can try
SecRuleRemoveById, instead of SecFilterRemove.

Another thing that I use, instead of <Location>, is <LocationMatch> (I'm
only mentioning this because of my ignorance on <Location> definition).

What your entry would look like is:
<LocationMatch "/">
	SecRuleRemoveById 300017
</LocationMatch>

-----
Jeremy

On Wed, 2007-06-27 at 14:10 +0100, Jeremy Wilkins wrote:
> Hi,
> 
> We've got apache2 (2.0.54-5sarge1) running with rules from gotroot,  
> and libapache2-mod-security  ( 1.9.4-1duo+sarge1)
> 
> One of our php sites is getting caught in filter 300017. I've tried  
> adding the following to the vhost file
> 
>    <Location "/">
>    SecFilterRemove 300017
>    </Location>
> 
> but this doesn't seem to have made any difference. If I instead set a  
> SecFilterEngine Off inside that Location block then that works. Is my  
> syntax wrong for the SecFilterRemove tag?
> 
> Thanks
> ---
> Jeremy Wilkins
> Ibex Internet Ltd
> 
> Parkside Business Park
> Parkside Rd.
> Kendal
> Cumbria
> LA9 7EN
> 
> Tel: 0845 226 8342
> Fax: 08718 729374
> 
> http://www.ibexinternet.co.uk/
> 
> 
> 
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> 
> ______________________________________________________________________
> This email has been scanned by the MessageLabs Email Security System.
> For more information please visit http://www.messagelabs.com/email 
> ______________________________________________________________________