Thanks for your reply, yes I did test it using the method described at the Debian site link in the previous post , I also turned on the post payload filter and set viagra as a secfilter etc... and tried sending from a form on the site with viagra in the content, and it didn.t do anything either.
I have had mod_security running great on a fedora 6 box previously and have used almost the same configuration for mod security. Both the above testing methods used to work on the fedora box, this is why I think it is not working.
have you tried it on Debian etch?
Thanks again, I have just renewed my subscription to this great site.