Mod security resulted in 406 error

[Sudesh]

The problem is that the /../../ string is used quite often through exploited scripts. There really isn't much reason for a production script to be using that sort of pathing instead of absolute paths.

I have been speaking to other hosting companies and found out that it is possible to create an exclusion entry for my sites in your mod_security exclusion config files.

http://www.gotroot.com/downloads/ftp...y/exclude.conf

[Buddha]

Looks like some false positives especially the word "curl". What are the rules being used?

[AndrewT]

It is not a false positive. It is purposely filtering those because those binaries are often referenced when users pass on actual commands through a form, historically an insecure version of phpBB. This prevents users from using these insecure scripts to download and execute software on our servers.

[AndrewT]

I have been speaking to other hosting companies and found out that it is possible to create an exclusion entry for my sites in your mod_security exclusion config files.

http://www.gotroot.com/downloads/ftp...y/exclude.conf

You might as well disable the filtering as mentioned above then. But if we find an account that gets exploited and has mod_security disabled, the domain will likely be suspended permanently.

[thewave]

I didn't write the script, I don't know how it is all handled internally. Perhaps you should ask the developers.

I realize that, but since YOU have installed mod_security and are configuring the rules, I had a wild idea you might have an idea what is setting it off. Perhaps you could save the snarky attitude for someone who appreciates it. I do not.

[AndrewT]

I realize that, but since YOU have installed mod_security and are configuring the rules, I had a wild idea you might have an idea what is setting it off. Perhaps you could save the snarky attitude for someone who appreciates it. I do not.

All I can give you is the rule that is denying the access. I did not write the script to know anything further.

[AndrewT]

See the latest update regarding mod_security: http://forums.dathorn.com/showthread...1461#post11461

[thewave]

See the latest update regarding mod_security: http://forums.dathorn.com/showthread...1461#post11461

Thank you very much for addressing the concerns of the few users who are having difficulty. Its greatly appreciated. I also understand that this will only remain so as long as server security is not affected.