NetBackup HOWTO's » mod_security2 http://www.netbackuphowto.com NBU Howto Site Sat, 28 Aug 2010 14:23:18 +0000 en hourly 1 http://wordpress.org/?v=abc Howto disable some rules on apache2+mod_security2 http://www.netbackuphowto.com/2008/11/25/howto-disable-some-rules-on-apache2mod_security2/ http://www.netbackuphowto.com/2008/11/25/howto-disable-some-rules-on-apache2mod_security2/#comments Tue, 25 Nov 2008 21:55:10 +0000 savasirez http://www.netbackuphowto.com/?p=96 If you’re facing difficulties with modsecurity and see logs like these and you think they should be allowed.

[Tue Nov 25 23:32:36 2008] [error] [client 106.78.1.61] ModSecurity: Access denied with code 400 (phase 2). Match of “rx ^OPTIONS$” against “REQUEST_METHOD” required. [file "/optional_rules/modsecurity_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "www.netbackuphowto.com"] [uri "/ads.php"] [unique_id "oAIMD06rogtjw4jt"]
You need to add the following lines to your httpd.conf (or under your virtualhost directives)

<ifModule mod_security2.c>
SecRuleRemoveById 960015
</ifModule>

You can of course add more SecRuleRemoveById lines accourding to your needs.

Attention: This setting works site-wide…

]]> http://www.netbackuphowto.com/2008/11/25/howto-disable-some-rules-on-apache2mod_security2/feed/ 0