Mod Security Configuration

[idslamyou]

I moved to a new server that has mod security installed and seem to be getting quite a few internal server errors when attempting simple tasks as editing a post or creating an article. The latest error was:

ModSecurity: Access denied with code 500 (phase 2). Pattern match
"((select|grant|delete|insert|drop|alter|replace|t runcate|update|create|rename|describe)[[:space:]]+[A-Z|a-z|0-9|\\*|
|\\,]+[[:space:]]+(from|into|table|database|index|view)[[:space:]]+[A-Z|a-z|0-9|\\*|
|\\,]|UNION SELECT.*\\'.*\\'.*,[0-9].*INTO.*FROM)" at
|REQUEST_BODY. [file
"/usr/local/apache/conf/modsec2.user.conf"] [line "345"]
[id "300013"] [rev "1"] [msg "Generic SQL injection
protection"] [severity "CRITICAL"] [hostname
"www.mydomain.com"] [uri
"/forums/content/130-old-credit-card-debt.html"]
[unique_id "4VzfmEWnjcsAAEPh-7sAAABm"]

Are there any mod security rules that I should have my server admin add to minimize these Internal Server Errors?

[Marco van Herwaarden]

More likely rules that need to be removed.

You see in the error message what rule triggered the error:

ModSecurity: Access denied with code 500 (phase 2). Pattern match "((select|grant|delete|insert|drop|alter|replace|t runcate|update|create|rename|d escribe)[[: .................