> I have made a SecUploadApproveScript to accept or deny
> files depending upon extension (.exe .cmd etc). And it
> works ok, with small files. But if I try to upload a
> file of abt. 1 MB or so it just hangs there forever.
>
> I'm using mod_security 1.8.4, and now I see that 1.8.5
> is out, is this something which is fixed in .5? Also
> I'm using Apache 2.0.50 on FedoraCore 2.
There have been some changes in that area but the problems
only manifested on Windows, not on Unix platforms. But
I do suggest you try 1.8.5 to see if it performs better.
I use a 9 MB file for testing prior to making new releases
and I haven't noticed anything suspicious. I've tested on
Windows and Unix.
The approve script execution should not depend on file
size. Are you seeing problems only when you enable
approval or at all times during upload (of large
files)?
Please enable debug logging and set log level 9, and then
send me the output. It will be rather large so I suggest
you send it to my email only - I'll inform the list later
if a problem is found.
--
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]
|
