Atomicorp

MikeShinn, Looks like in /etc/asl/VERSION I have the line MODSEC_VERSION=201103161326 I'm not using any other modules like suhosin or mod_evasive that might be blocking something. I'm not sure how to put mod_security into debug mode. Yes, I was trying to whitelist because one of our applications use...

Scott, yes I am using mod_security from atomic channel.

I'm not using cpanel. The pattern seems to be that when our IP is whitelisted pages sometimes load strangely or sometimes not at all with no message in the logs (on normal pages like index.php, not on urls that might get caught by the rules). If I take our IP out of the whitelist and restart apache ...

I'm using Apache and yes logging is set up and working. In /etc/asl/config I have this: MODSEC_99_REDACTOR="yes" Does this mean I'm using the redaction rules? There are no redaction rules in /etc/httpd/modsecurity.d. In /var/asl/rules/modsec I have: 99_asl_a_redactor.conf 99_asl_redactor.c...

Yes, the system is logging modsec events.
It seems like the css not loading and now also blank php pages happen when our IP is whitelisted.
I'm using the default rules.

There is nothing that would indicate an error at:
/etc/httpd/logs/audit_log
or
/var/asl/data/audit/20110314

Just starting with ASL-Lite on an existing site and trying to figure out some of the glitches. It looks like sometimes the pages are loading without the css but not all the time. Has anyone seen this before? I see no error in the logs.