D
Doc Rock
Guest
Hey, I'm having a problem with mod_security blocking email messages from Horde that include a cc: in the body of the message. I cannot seem to find what rule I need to suspend in order to let those go through.
I'm running Plesk 8.2 on RHEL and still using mod_sec 1.9.
The error that I see in my error_log is:
[Wed Oct 29 13:26:12 2008] [error] [client xx.xx.xx.xx] mod_security: Access denied with code 403. Pattern match "cc:" at POST_PAYLOAD [severity "EMERGENCY"] [hostname "xxx.host.net"] [uri "/imp/compose.php?uniq=13u3jwo3evnk"]
In the exclude.conf file I have:
#Squirrel mail and Horde postings
<LocationMatch "/imp/compose.php">
SecFilterRemove 300013
SecFilterRemove 300015
SecFilterRemove 300016
</LocationMatch>
Doc
I'm running Plesk 8.2 on RHEL and still using mod_sec 1.9.
The error that I see in my error_log is:
[Wed Oct 29 13:26:12 2008] [error] [client xx.xx.xx.xx] mod_security: Access denied with code 403. Pattern match "cc:" at POST_PAYLOAD [severity "EMERGENCY"] [hostname "xxx.host.net"] [uri "/imp/compose.php?uniq=13u3jwo3evnk"]
In the exclude.conf file I have:
#Squirrel mail and Horde postings
<LocationMatch "/imp/compose.php">
SecFilterRemove 300013
SecFilterRemove 300015
SecFilterRemove 300016
</LocationMatch>
Doc