mod-security-users

[mod-security-users] TRACE Method

[<ml...@pa...>]

Hi,
I'm using mod_security 1.8.2 on Apache2. 
My configuration (apache2.conf) is below,

<IfModule mod_security.c>
 SecFilterEngine On
 SecFilterDefaultAction "deny,status:406"
 SecFilterSelective REQUEST_METHOD "!(GET|POST|HEAD)"
</IfModule>

It is work fine in proxy path which using ProxyPass, but not catch up
TRACE method in non-proxy path, so I must use mod_rewrite.

any idea in mod_security?

--
Katsuharu Watanabe

Re: [mod-security-users] TRACE Method

[Ivan R. <iv...@we...>]

ml...@pa... wrote:

> Hi,
> I'm using mod_security 1.8.2 on Apache2. 
> My configuration (apache2.conf) is below,
> 
> <IfModule mod_security.c>
>  SecFilterEngine On
>  SecFilterDefaultAction "deny,status:406"
>  SecFilterSelective REQUEST_METHOD "!(GET|POST|HEAD)"
> </IfModule>
> 
> It is work fine in proxy path which using ProxyPass, but not catch up
> TRACE method in non-proxy path, so I must use mod_rewrite.
> 
> any idea in mod_security?

  mod_security does not see the TRACE requests because it
  runs in a late phase in request processing. The use of
  mod_rewrite to handle TRACE is recommended. Future versions
  of mod_security may include a hook to run certain
  checks earlier.

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]

Re: [mod-security-users] TRACE Method

[Katsuharu W. <ml...@pa...>]

At Wed, 07 Jul 2004 11:23:04 +0100,
Ivan Ristic wrote:
> 
>   mod_security does not see the TRACE requests because it
>   runs in a late phase in request processing. The use of
>   mod_rewrite to handle TRACE is recommended. Future versions
>   of mod_security may include a hook to run certain
>   checks earlier.
> 

mod_security is great and promising.
I'm looking forward to future version.

Thanks,

--
Katsuharu Watanabe