
11-10-2009, 02:40 PM
|
| عضو ماسي | | |
I can no longer post on my forum after updating mod_security to 2.5.10.
I have followed http://www.vbulletin.com/go/modsecurity which fixed the admincp.
Errorlog:
[Tue Nov 10 02 11 2009] [error] [client 10.10.1.2] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/base_rules/modsecurity_crs_60_correlation.conf"] [line "41"] [msg "Transactional Anomaly Score (score 15): ASP/JSP source code leakage"] [hostname "www.xxxxxxxxxx.com"] [uri "/new/forumdisplay.php"]
[Tue Nov 10 02:15:07 2009] [error] [client 10.10.1.2] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/base_rules/modsecurity_crs_60_correlation.conf"] [line "41"] [msg "Transactional Anomaly Score (score 60): Detects JavaScript location/document property access and window access obfuscation"] [hostname "www.xxxxxxxx.com"]
I don't want to have to disable mod_security for the whole site.
Can anyone advice on configuring mod_security* please.
__DEFINE_LIKE_SHARE__
|