Old 7th August 2007, 02:48
rickconn rickconn is offline
Junior Member
Join Date: Jul 2007
Posts: 5
Thanks: 0
Thanked 0 Times in 0 Posts
Default mod_security breaking ispc

Gday Team,

I have debian etch with ispc 2.2.14

I have installed mod_security 2.1.1-0

I am concerned about breaking somthing in ispc.

I found the following in my log file.

The following entry relates to the domain for ispconfig not for hosted domains.
These errors are 'CRITICAL' and I guess it means ispconf will not be able to
do something it need to.

[07/Aug/2007:01:15:13 +1000] [tld.mydomain.com/sid#8292580][rid#856aab8][/][2]
Warning. Match of "rx OPTIONS" against "REQUEST_METHOD" required. [id "960015"]
[msg "Request Missing an Accept Header"] [severity "CRITICAL"]

After commenting out The above rule, I get the following 'critical' error

[07/Aug/2007:01:19:48 +1000] [tld.mydomain.com/sid#82942b0][rid#857f5f8][/][2]
Warning. Match of "rx ^((??:POS|GE)T|OPTIONS|HEAD))$" against "REQUEST_METHOD" required. [id "960032"]
[msg "Method is not allowed by policy"] [severity "CRITICAL"]

After comment out both rules, I have no more errors for my ispconfig domain,
however I also do not have those rules being applied to my hosted domains.

Can someone please help with writing a rule to exclude ispconfigs domain only,
so the above rule can be used again.

Thankyou for your time and effort.

Reply With Quote
Sponsored Links
Old 7th August 2007, 11:28
AlArenal AlArenal is offline
Senior Member
Join Date: Feb 2007
Location: Germany
Posts: 104
Thanks: 1
Thanked 5 Times in 5 Posts

ISPC comes with it's own apache webserver. So if you install mod_security on Debian Etch, it is "only" integrated in the distribution's apache serving the webpages, not within ISPC's apache.
Reply With Quote


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Problem with Breaking ISPC Morons Installation/Configuration 4 20th March 2007 09:58
ISPC move to port 80 on dedicated IP, but now ISPC complains Apache down martinfst Installation/Configuration 3 12th January 2007 09:51
I wanna get aide running on the ISPC apache1.3? tom Installation/Configuration 5 8th May 2006 01:52
Sometimes ISPC hangs up tom Installation/Configuration 3 24th April 2006 21:34
ISPC install stops str2etboy Installation/Configuration 19 28th January 2006 08:18

All times are GMT +2. The time now is 03:49.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.