mod-security-users

[mod-security-users] Filtering 404's and 500's

[Philippe B. <pbo...@ci...>]

Hi,

On a reverse proxy, I'm trying to filter HTTP 404 and HTTP 500 errors.

I'm using the following rule :
SecFilterSelective OUTPUT "HTTP\/(0\.9|1\.0|1\.1) 404 Not Found"
and the 500 one is similar.

I've tried a few other ones, but this one looks fine to me.

It doesn't work, why ?
Could it be that the headers are not part of "OUTPUT" ?


Sincerely,

Philippe Bourcier

Re: [mod-security-users] Filtering 404's and 500's

[Ivan R. <iv...@we...>]

Philippe Bourcier wrote:
> 
> Hi,
> 
> On a reverse proxy, I'm trying to filter HTTP 404 and HTTP 500 errors.
> 
> I'm using the following rule :
> SecFilterSelective OUTPUT "HTTP\/(0\.9|1\.0|1\.1) 404 Not Found"
> and the 500 one is similar.
> 
> I've tried a few other ones, but this one looks fine to me.
> 
> It doesn't work, why ?
> Could it be that the headers are not part of "OUTPUT" ?

  That's exactly why.

  In 1.9 there is a new variable OUTPUT_STATUS. It contains only
  the response code. Try using that.

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org