apache - modsecurity "Inbound Anomaly Score" -
I have made a lot of mistake on my logs in a site shared by Ovi Pro =>
Modassariari: Warning operator matches LTE TX at 20: inbound_non_score_core [File "/usr/local/apache2/conf/modsecurity/base_rules/modsecurity_crs_60_correlation.conf"] [line "32"] [msg] Inbound anomaly score (total inbound score: 2, SQL =, xss =): Praha header Cache-control headers are required for HTTP / 1.1 requests. "]
It seems that WF comes from the tomb Does anyone know how to solve or fix those errors?
Thank you!
The message you received is a specific message from ModSecurity, when it was due to a positive match in the Mod Safety Ruleset Block incoming request.
It looks like your hoster uses the security for security and according to that rule, the error that puts it is described as the following:
The infected rule checks for the existence of the first Pregma request header if it is found, then checks the respective cache-control headers (as the HTTP 1.1 RFC states should present one to the customers). If this is also unavailable, then it confirms the HTTP protocol version. If this is 1.1 then the rule generally makes this rule understand, because it blocks the incoming request that does not conform to HTTP RFC.
If you rule, you can place the following in your webserver configuration (if your hoster allows you to edit your host host configuration):
SecRuleRemoveById 960020 Please note, it is not possible to disable the rules using .htaccess files with mod security 2.x. Then you should
Comments
Post a Comment