Help .... Modsecurety problem

Portal Home > Knowledgebase > Articles Database > Help .... Modsecurety problem

Posted by mixmox, 09-12-2010, 03:01 PM
hello. after we install modsecurety on our server. when we try this link: http://get.musiclab.com/1786-%D8%A7%...---Dont-Belive it show us : Bad Request Your browser sent a request that this server could not understand. Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request. Power MOD by web4host.net Server at 01.hirka2music5.com Port 80 how can i delete the rull that make this problem from mod securety ?
Posted by mixmox, 09-12-2010, 03:09 PM
This are my base rull. please help me from them: [root@sv base_rules]# ls modsecurity_40_generic_attacks.data modsecurity_41_sql_injection_attacks.data modsecurity_46_et_sql_injection.data modsecurity_46_et_web_rules.data modsecurity_50_outbound.data modsecurity_crs_20_protocol_violations.conf modsecurity_crs_21_protocol_anomalies.conf modsecurity_crs_23_request_limits.conf modsecurity_crs_30_http_policy.conf modsecurity_crs_35_bad_robots.conf modsecurity_crs_40_generic_attacks.conf modsecurity_crs_41_phpids_converter.conf modsecurity_crs_41_phpids_filters.conf modsecurity_crs_41_sql_injection_attacks.conf modsecurity_crs_41_xss_attacks.conf modsecurity_crs_45_trojans.conf modsecurity_crs_46_et_sql_injection.conf modsecurity_crs_46_et_web_rules.conf modsecurity_crs_47_common_exceptions.conf modsecurity_crs_48_local_exceptions.conf modsecurity_crs_49_enforcement.conf.stoped modsecurity_crs_50_outbound.conf modsecurity_crs_60_correlation.conf
Posted by bear, 09-12-2010, 03:32 PM
That link has Arabic characters and spaces in it. Odds are that's the cause, not mod security.
Posted by mixmox, 09-12-2010, 04:17 PM
when mod securety is disable link work fine nuke cms + htaccess + seo
Posted by jphilipson, 09-12-2010, 05:37 PM
You need to check which rule is being triggered in the error_log and modsec_audit log file, then add an exclusion for the rule.
Posted by mixmox, 09-12-2010, 05:48 PM
wher is the location of modsec_audit ? [root@da log]# find / -name modsec_audit no file found
Posted by LnxtecH, 09-13-2010, 07:39 PM
Its logs/modsec_audit.log normally but confirm whats 'SecAuditLog' set to in your conf.