Topic: mod_security 2.7.3 not working on Windows 7

[Fairfielder1]

I am using Apache as a reverse proxy server. I am running Apache on a Windows 7 64 bit box. I downloaded and installed Apache 2.2.22 win 32
and mod_security 2.7.3 win 32 for Apache 2.2 from the apachelounge web site and followed the installation instructions, including the installation of the Visual C++ 2010 SP1 Redistributable Package x86. After installation I
tried testing mod_security using the method described in the Readme file
included in the mod_security zip archive:

I added this rule:
SecRule ARGS "\.\./"
"t:normalizePathWin,id:50904,severity:4,t:none,t:urlDecodeUni,t:htmlEntityDecode,t:lowercase,msg:'Drive
Access'"

After re-starting Apache I called my site with this:
http://www.xxxx.com/?abc=../../ (substituting my website)

The docs say:
"You should get a access denied and is logged in the Apache error.log, it is
triggered by the above rule."

I did not get an access denied page and did not see anything in the Apache
error.log to indicate that mod-security blocked access.

Any ideas why?

Can I run the win 32 mod_security binary from apache lounge on a 64 bit win box? I didn't see any 64 bit download option.

Fairfielder1

[Steffen]

Did you added also the following ?

SecRuleEngine On
SecDefaultAction "deny,phase:2,status:403"

And the rule is one line, not splitted in three line as you show.

Steffen

[Fairfielder1]

Yes, I added those lines.
I rebooted the web server computer and now it's working.