Lsws 4.1.1

[sux0r]

http://www.litespeedtech.com/packages/4.0/lsws-4.1.1-ent-i386-linux.tar.gz

?? o.O

[meto]

Another development version?

[DraCoola]

this v4.1.1 suddenly triggering modsec rule :

SecRule REQUEST_COOKIES:PHPSESSID "!^[0-9a-z]*$"

which was not happen while using v4.1 and apache 2.2.17 - 2.2.18

[mistwang]

Can you check the request header with firebug or liveheader, what is the value of
REQUEST_COOKIES:PHPSESSID ?

Also, please enable LSWS debug logging

and Mod security debug logging

SecDebugLogLevel 9

It should show what exactly happened.

[DraCoola]

Thank you george for your kind attention.
I decide to temporarily backward to v4.1 right now and wait until my mod_sec rule set finished on your investigation.

many thanks!