Author Topic: Problems with mod_security  (Read 3427 times)

Offline frednks

  • Newbie
  • *
  • Posts: 1
Problems with mod_security
« on: November 23, 2014, 12:31:58 PM »
Hi, I'm Fred h in Brazil. Sorry my english !!

I have ispconfig 3 installed with roudcube. This all Ok
Webmail running cool, put on the same server I have mod_security for Apache protection, and I think this filtering my roundcube because at times in webmail the message: ERROR SERVER (FORBIDDEN) it up as warning message.

Sometimes the page is all white just message:
Forbidden
You do not have permission to access / webmail / on this server.

Has anyone experienced this using modesecurity more roundcube ??

Now some Info: I use the directory / webmail to roundcube.
Installed squirrielmail then migrated to the roundcube, and the directory is
/ usr / share / squirrelmail /

My directory ModSecurity is / etc / modesecuity my main configuration file eh modsecurity.conf I copied the modsecurity.conf-recommended file.

In this main configuration file I already added the lines:
#Rule To allow Roundcube html2text
SecRule REQUEST_FILENAME "/usr/share/squirrelmail/bin/html2text.php" \
"allow, phase 1, nolog, ctl: ruleEngine = Off"

#Rule To allow Roundcube to forward imbedded images and exclude from scanning compression
<LocationMatch '^ / webmail'>
SecRuleRemoveById 950004,950019,960903
</ LocationMatch>

Restarted apache2, more still continues with the same problem !!

Can anyone help me ???

Wait. Thanks.
[]'s