A
ACID25
Guest
Hi
i installed mod_security on some of or servers and i know the plesk statistics are not more available. I found that in the domains error_log file
[Tue Jun 24 14:53:49 2008] [error] [client 217.XXX.XXX.XXX] ModSecurity: Access denied with code 404 (phase 4). Pattern match "\\b(?:Th(?:is (?:summary was generated by.{0,100}?(?:w(?:ebcruncher|wwstat)|analog|Jware)|analysis was produced by.{0,100}?(?:calamaris|EasyStat|analog)|report was generated by WebLog)|ese statistics were produced by (?:getstats|PeLAB))|[gG]enerated by. ..." at RESPONSE_BODY. [file "/etc/httpd/modsecurity/modsecurity_crs_50_outbound.conf"] [line "19"] [id "970002"] [msg "Statistics Information Leakage"] [severity "WARNING"] [hostname "domain.tld"] [uri "/plesk-stat/webstat/index.html"] [unique_id "DSc91H8AAAEAADyBNgkAAAAN"]
so what can i do the make the statistics available again. But i don´t want to delete the rule that prevent the access to the index.html file. Access should be possible without password access.
So what can i do????
THX for help in advance and kind regards
ACID25
i installed mod_security on some of or servers and i know the plesk statistics are not more available. I found that in the domains error_log file
[Tue Jun 24 14:53:49 2008] [error] [client 217.XXX.XXX.XXX] ModSecurity: Access denied with code 404 (phase 4). Pattern match "\\b(?:Th(?:is (?:summary was generated by.{0,100}?(?:w(?:ebcruncher|wwstat)|analog|Jware)|analysis was produced by.{0,100}?(?:calamaris|EasyStat|analog)|report was generated by WebLog)|ese statistics were produced by (?:getstats|PeLAB))|[gG]enerated by. ..." at RESPONSE_BODY. [file "/etc/httpd/modsecurity/modsecurity_crs_50_outbound.conf"] [line "19"] [id "970002"] [msg "Statistics Information Leakage"] [severity "WARNING"] [hostname "domain.tld"] [uri "/plesk-stat/webstat/index.html"] [unique_id "DSc91H8AAAEAADyBNgkAAAAN"]
so what can i do the make the statistics available again. But i don´t want to delete the rule that prevent the access to the index.html file. Access should be possible without password access.
So what can i do????
THX for help in advance and kind regards
ACID25