Download
Blog
Wiki
Forum
Store
Contact
Home
Products
Web Server
Load Balancer
LiteSpeed SAPI
Solutions
Web Hosting
Online Gaming
PHP Application
Rails Hosting
Case Studies
Resources
Documentation
White Papers
Benchmarks
Testimonials
FAQ
HOW-TOs
Support
Services
Wiki
Forum
Company
About
News
Blog
Management
Partners
Careers
Support
Services
Wiki
Forum
User Name
Password
Remember Me?
Register
FAQ
Members List
Calendar
Search
Today's Posts
Mark Forums Read
LiteSpeed Support Forums
>
LiteSpeed Web Server
>
Bug Reports
>
lsws 4.1.11 not support modsec rules?
Thread Tools
Display Modes
#
1
03-16-2012, 01:45 AM
DraCoola
Senior Member
Join Date: Mar 2009
Posts: 149
lsws 4.1.11 not support modsec rules?
I just wondering about why there so many modsec rules suddenly lost it functions while using litespeed.
I had test it with a very simple rule for an example :
Code:
SecRule REQUEST_URI "^/abc\.php$" "deny"
As above rule expected, Apache bring 406 error page to
http://domain.com/abc.php
access.
But unfortunatelly, litespeed will still give us totaly freedom to access
http://domain.com/abc.php
.
Is there any special way to write that just "REQUEST_URI denial" modsec rule with litespeed?
Last edited by DraCoola; 03-16-2012 at
01:48 AM
..
DraCoola
View Public Profile
Send a private message to DraCoola
Find all posts by DraCoola
#
2
03-16-2012, 07:50 AM
mistwang
LiteSpeed Staff
Join Date: May 2003
Location: New Jersey
Posts: 7,583
does abc.php file exists? and the file need to be processed as a script.
LiteSpeed ignore mod_sec for static files.
mistwang
View Public Profile
Send a private message to mistwang
Visit mistwang's homepage!
Find all posts by mistwang
#
3
03-16-2012, 04:26 PM
DraCoola
Senior Member
Join Date: Mar 2009
Posts: 149
yes abc.php is exist.
the file is php file which have active script inside it.
DraCoola
View Public Profile
Send a private message to DraCoola
Find all posts by DraCoola
#
4
03-19-2012, 02:17 AM
DraCoola
Senior Member
Join Date: Mar 2009
Posts: 149
Superb!
Force update 4.1.11 will fixed this modsec compatibily.
Thank you, George!
DraCoola
View Public Profile
Send a private message to DraCoola
Find all posts by DraCoola
«
Previous Thread
|
Next Thread
»
Thread Tools
Show Printable Version
Email this Page
Display Modes
Linear Mode
Switch to Hybrid Mode
Switch to Threaded Mode
Posting Rules
You
may not
post new threads
You
may not
post replies
You
may not
post attachments
You
may not
edit your posts
BB code
is
On
Smilies
are
On
[IMG]
code is
On
HTML code is
Off
Forum Rules
Forum Jump
User Control Panel
Private Messages
Subscriptions
Who's Online
Search Forums
Forums Home
General
News
Use Cases
LiteSpeed Web Server
General
Install/Configuration
LiteSpeed Cache
Feedback/Feature Requests
Bug Reports
LSWS 4.1 Release
LiteSpeed Load Balancer
General
LiteSpeed Anti-DDoS
Proxy Service
Popular web applications
Word Press
vBulletin Forum
Joomla
Magento
External Applications
Apache Migration/Compatibility
Ruby/Rails
PHP
CGI/Perl/Python
Java JSP/Servlet
All times are GMT -7. The time now is
12:39 AM
.
-
Archive
-
Top
© Copyright 2003-2011 LiteSpeed Technologies, Inc. All rights reserved.
Privacy Policy
.