Hello all,
Starting with FC7, if I type in http://mywebserver.com/sjfdfgsx.conf
or anything that ends in .conf, I get the dreaded "internal server error":
[Sun Aug 05 12:24:57 2007] [error] [client 131.156.129.66] ModSecurity:
Access denied with code 500 (phase 1). Pattern match
"\\\\.(?:c(?:o(?:nf(?:ig)?|m)|s(?:p
roj|r)?|dx|er|fg|md)|p(?:rinter|ass|db|ol|wd)|v(?:b(?:proj|s)?|sdisco)|a(?:s(?:a
x?|cx)|xd)|s(?:html?|ql|tm|ys)|d(?:bf?|at|ll|os)|i(?:d[acq]|n[ci])|ba(?:[kt]|cku
p)|res(?:ources|x)|l(?:icx|nk|og)|\\\\w{,5}~|webinfo|ht[rw]|xs ..." at
REQUEST_BASENAME. [id "960035"] [msg "URL file extension is restricted by
policy"]
[severity "CRITICAL"] [hostname "mymachine.com"] [uri "/wge.conf"]
[unique_id "EkHLBIOcCC8AAGU8vbwAAAAd"]
How do I fix this in httpd.conf? Thanks for any help.
*******************************************************************************
Gilbert Sebenste ********
(My opinions only!) ******
*******************************************************************************
