0
0

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?

More than 5 years have passed since last update.

reverse Proxy Mod_security

Posted at

CRSを使用してMod-Securityをインストールしましたが、OWASPルールがクライアントをブロックしました。
クライアントリクエストのメタデータ文字が問題になって(modsecurityではインジェクションとして解釈され)、ドロップされます。 助けてください !!!

Log
[Fri March 3 11:7:22 2018] [error] [client 10.4.118.123] ModSecurity:
Warning. Pattern match "([\\~\\!\\@\\#\\$\\%\\^\\&\\
\\[\\]\\|\\:\\;\"\\'\\\xc2\xb4\\\xe2\x80\x99\\\xe2\x80\x98\\`\\<\\\\>].*?){4,}" at ARGS:rid.
[file "/etc/httpd/modsecurity.d/activated_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "170"] [id "981173"] [rev "2"]
[msg "Restricted SQL Character Anomaly Detection Alert - Total # of special characters exceeded"]
[data "Matched Data: - found within ARGS:rid: 496ef4f5-9da1-4331-9bb7-f5ed4dff0d6e"] [ver "OWASP_CRS/2.2.6"] [maturity "8"] [accuracy "7"]
[hostname "zrrdo.com"] [uri "/dtp/frontoffice/api/v5/covea/gmf/c688e6f9-d07a-544b-8924-861da42e2d08/document/doc-a675095e-8e98-466c-85a5-8a77040f65f8/index.json"]
[unique_id "XEiFgsCoczMAAAQVcxMAAAFK"]_

0
0
0

Register as a new user and use Qiita more conveniently

  1. You get articles that match your needs
  2. You can efficiently read back useful information
  3. You can use dark theme
What you can do with signing up
0
0

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?