Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: Is my mod_security working as it should be? |
|
| Author |
|
techy
Joined: 26 May 2012
Posts: 7
|
 Posted: Sat 26 May '12 19:54 Post subject: Is my mod_security working as it should be? |
 |
|
Hi,
I just got this mod installed. With the first try I didn't got any error when trying to load the example URL ?abc../../. But it got logged.
And now, I have a lot of these entries,
| Code: | | [Sat May 26 17:45:01 2012] [error] [client xxx.xxx.xxx.xxx] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "............./conf/rules/base_rules/modsecurity_crs_30_http_policy.conf"] [line "31"] [id "960032"] [msg "Method is not allowed by policy"] [data "GET"] [severity "CRITICAL"] [tag "POLICY/METHOD_NOT_ALLOWED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A6"] [tag "OWASP_AppSensor/RE1"] [tag "PCI/12.1"] [hostname "domain.com"] [uri "/index.php"] [unique_id "T8D6fAoAARkAABa0IjYAAAAQ"] |
The URL that has been loaded is just a fine looking URL and should load without any warnings.
Appreciate any help. |
|
| Back to top |
|
Steffen
Moderator
Joined: 15 Oct 2005
Posts: 3093
Location: Hilversum, NL, EU
|
| Posted: Sun 27 May '12 11:14 Post subject: |
|
|
That's the rule id "960032" you find in modsecurity_crs_30_http_policy.conf, to check which request methods you allow.
It is is checking against %{tx.allowed_methods} and triggers on the GET method.
In modsecurity_crs_10_config.conf you can find the allowed methods:
...
setvar:'tx.allowed_methods=GET HEAD POST OPTIONS', \
...
Assume you are using modsecurity_crs_10_config.conf, and read the INSTALL in the modsecurity-crs_2.2.4.zip |
|
| Back to top |
|
|
|
|
|
|
