Trying to use the product, but keep running into mod_sec errors. Any ideas on bypassing or what its using that is triggering?
[Fri Oct 09 12:25:56 2009] [error] [client xxxx] ModSecurity: Access denied with code 403 (phase 2). Match of "beginsWith http://%{SERVER_NAME}/" against "MATCHED_VAR" required. [file "/usr/local/apache/conf/modsec_rules/10_asl_rules.conf"] [line "689"] [id "340162"] [rev "160"] [msg "Remote File Injection attempt in ARGS (AE)"] [data ""] [severity "CRITICAL"] [hostname "www.xxxx.com"] [uri "/forum/admincp/automediaembed_admin.php"] [unique_id "Ss9yJEESeAIAAENJMkoAAAAG"]
|