2009年5月17日

Apace ModSecurity: Access denied with code 400

Error Message:

[Sun May 17 14:16:08 2009] [error] [client 192.168.0.113] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\\\d\\\\.]+$" at REQUEST_HEADERS:Host. [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [hostname "192.168.0.100"] [uri "/1.txt"] [unique_id "nRMpCHapBUYAAAq7MQMAAAAG"]

解決方法:

vi /etc/httpd/modsecurity.d/modsecurity_crs_10_config.conf
把SecRuleEngine on 改成 off即可正常瀏覽

沒有留言:

張貼留言