[mod-security-users] More false posives (960015, 960009) :(
Brought to you by:
victorhora,
zimmerletw
Menu
▾
▴
[mod-security-users] More false posives (960015, 960009) :(
|
From: Ruben L. <ber...@ho...> - 2007-09-03 05:06:30
|
Hi all, another time.. little by little im understanding rules set on my server. But i can't under= stand some rules hits logs. I look for some information about it in google,= but i cant to interpret some errors.. For example i get next error in all images i upload to my server, and i use= it in my blog: [Mon Sep 03 06:30:56 2007] [error] [client 192.168.1.110] ModSecurity: Warn= ing. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [id "960015= "] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [hostname= "www.bermejator.com"] [uri "/wp-content/uploads/2007/08/illustration.gif"]= [unique_id "o4UhxsCoAW4AAIH5WjwAAAAD"] I know rx is a regular expression operator, but i dont know the meaning of = this between my images and my server... I get the same error, in another script, without relationship with images: [Mon Sep 03 06:39:12 2007] [error] [client 192.168.1.110] ModSecurity: Warn= ing. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [id "960015= "] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [hostname= "www.bermejator.com"] [uri "/wp-cron.php?check=3Dea0263e935ff651669c4bcdea= f21b16b"] [unique_id "wRrq5cCoAW4AAIH6XFwAAAAE"] This script get my another error, with "eq" (i know its a numerical compari= son operator) but dunno why it is generated: [Mon Sep 03 06:39:12 2007] [error] [client 192.168.1.110] ModSecurity: Warn= ing. Operator EQ match: 0. [id "960009"] [msg "Request Missing a User Agent= Header"] [severity "WARNING"] [hostname "www.bermejator.com"] [uri "/wp-cr= on.php?check=3Dea0263e935ff651669c4bcdeaf21b16b"] [unique_id "wRrq5cCoAW4AA= IH6XFwAAAAE"] I think i have to avoid false positives (http://www.modsecurity.org/blog/ar= chives/2007/02/handling_false.html) but don't understand why the errors bef= ore, are false positives. Sorry with my english, and thank u for help Rub=E9n Lara _________________________________________________________________ Llama a tus amigos de PC a PC: =A1Es GRATIS! http://get.live.com/messenger/overview= |