Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision Both sides next revision
litespeed_wiki:config:mod_security_faq [2018/10/08 20:27]
Jackson Zhang [Does LSWS Support the "Concurrent" Type of Audit Log?]
litespeed_wiki:config:mod_security_faq [2018/10/08 20:34]
Jackson Zhang [Unsupported Variable error]
Line 19: Line 19:
   2018-10-08 15:​51:​43.110779 ​ ERROR   ​[ModSecurity] failed to parse a modsec variable. while parsing: %{REQUEST_COOKIES.pwg_id}   2018-10-08 15:​51:​43.110779 ​ ERROR   ​[ModSecurity] failed to parse a modsec variable. while parsing: %{REQUEST_COOKIES.pwg_id}
   2018-10-08 15:​51:​43.110937 ​ ERROR   ​[ModSecurity] failed to parse a modsec variable. while parsing: %{REQUEST_COOKIES.pwg_id}   2018-10-08 15:​51:​43.110937 ​ ERROR   ​[ModSecurity] failed to parse a modsec variable. while parsing: %{REQUEST_COOKIES.pwg_id}
 +
 +or
 +  2018-09-26 16:​57:​36.700054 [INFO] Processing config file: 
 +  /​etc/​apache2/​conf.d/​modsec_vendor_configs/​imunify360_full_litespeed/​001_i360_1_generic.conf
 +  2018-09-26 16:​57:​36.700631 [ERROR] [ModSecurity] unknown server variable while parsing: FILES_COMBINED_SIZE
 +  2018-09-26 16:​57:​36.700669 [ERROR] [ModSecurity] FILES_COMBINED_SIZE "@gt %{tx.combined_file_sizes}"​ "​t:​none":​ Rule not supported.
 +  2018-09-26 16:​57:​36.703233 [ERROR] [ModSecurity] unknown server variable while parsing: MATCHED_VARS_NAMES
 +  2018-09-26 16:​57:​36.703266 [ERROR] [ModSecurity] MATCHED_VARS_NAMES "​TX:​paramcounter_(.*)"​ "​capture":​ Rule not supported.
 +  2018-09-26 16:​57:​36.706773 [ERROR] [ModSecurity] unknown server variable while parsing: ARGS_COMBINED_SIZE
 +  2018-09-26 16:​57:​36.706802 [ERROR] [ModSecurity] ARGS_COMBINED_SIZE "@gt %{tx.total_arg_length}"​ "​t:​none":​ Rule not supported.
 +  2018-09-26 16:​57:​36.707414 [ERROR] [ModSecurity] unknown server variable while parsing: REQBODY_ERROR
 +  2018-09-26 16:​57:​36.707456 [ERROR] [ModSecurity] REQBODY_ERROR "!@eq 0" "​msg:'​Failed to parse request body.||MVN:​%{MATCHED_VAR_NAME}||T:​LITESPEED||MV:​%{MATCHED_VAR}||PC:​%{PERF_COMBINED}',​tag:'​i360',​id:​88139653,​rev:'​1',​maturity:'​9',​accuracy:'​9',​phase:​request,​pass,​t:​none,​tag:'​noshow',​severity:​7,​tag:'​o'":​ Rule not supported.
 +  2018-09-26 16:​57:​36.708774 [INFO] Processing config file: 
 +  /​etc/​apache2/​conf.d/​modsec_vendor_configs/​imunify360_full_litespeed/​002_i360_2_bruteforce.conf
 +  2018-09-26 16:​57:​36.709169 [INFO] Processing config file: 
 +  /​etc/​apache2/​conf.d/​modsec_vendor_configs/​imunify360_full_litespeed/​003_i360_3_wallarm.conf
 +  2018-09-26 16:​57:​36.709222 [INFO] Processing config file: 
 +  /​etc/​apache2/​conf.d/​modsec_vendor_configs/​imunify360_full_litespeed/​004_i360_4_webshells.conf
 +  2018-09-26 16:​57:​36.907572 [INFO] Processing config file: 
 +  /​etc/​apache2/​conf.d/​modsec_vendor_configs/​imunify360_full_litespeed/​005_i360_5_custom.conf
 +  2018-09-26 16:​57:​36.908424 [INFO] Processing config file: 
 +  /​etc/​apache2/​conf.d/​modsec_vendor_configs/​imunify360_full_litespeed/​100_Init_Initialization.conf
  
 We try to keep LSWS compatible with the latest mod_security 2.5(and above) and gotroot rules. LSWS supports most of these rules and attempts not to miss any really important features/​rules used in the real world. We also keep updating support based on our user feedback. ​ However, because of the complexity and always updating nature of these security rules, it is not possible to be 100% compatible with Apache at any one time.  We try to keep LSWS compatible with the latest mod_security 2.5(and above) and gotroot rules. LSWS supports most of these rules and attempts not to miss any really important features/​rules used in the real world. We also keep updating support based on our user feedback. ​ However, because of the complexity and always updating nature of these security rules, it is not possible to be 100% compatible with Apache at any one time. 
  • Admin
  • Last modified: 2019/06/06 15:41
  • by qtwrk