MyBB 1.4 Problem

[Slider]

I have downlaod the MyBB 1.4 and all works fine but the Admin CP got a Problem! Here are the Logs!


The Link looks so:
http://www.xxx.xx/community/admin/index ... ig/plugins

[Tue Aug 05 19:24:05 2008] [error] [client xx.xxx.xx.xxx] ModSecurity: [file "/etc/httpd/modsecurity.d/99_asl_jitp.conf"] [line "4492"] Access denied with code 403 (phase 2). Pattern match "(\\.\\./\\.\\.|/)" at ARGS:module. [hostname "www.xxx.xx"] [uri "/community/admin/index.php"] [unique_id "uRD5KD6NOK0AAFLT5FgAAAAD"]

Should i deativate ASL JITP?

[scott]

No, but if you hit the report false positive button, it will send us what we need to check it out.

[Slider]

next Problem: The Security Message will not apear (Security Event). So i cant report it so i report it so

There are Security Events but not from this Domain where the Forbidden Error comes

[Highland]

If your ASL panel in Plesk doesn't work (and even if it did, it doesn't show all mod_security activity) you can always go into the /var/asl/data/audit/YYYYMMDD directory (be sure to replace YYYYMMDD with the current date) and do the following

Code: Select all

#grep -r yourdomain.com *

See what files are returned and then open one in your text editor. Copy the full message and send it to support AT atomicorp DOT com. If they update the rules to fix it, update your ASL install

Code: Select all

#asl-u

[scott]

We usually get an update out the same day. Id also contact support about your interface problem, sounds like it might be permissions related or something. The new version in asl-2.0-testing supports storing alerts in mysql now. Using that would fix a lot of problems.

[Slider]

Thank you Highland i found there the full report so now i have send to Support Team! I really dont know why only this Message is not in the Security Event. The others are -.-

I am happy if new things are cooming out and are easilier with storage

[Slider]

yo Scott update has fixed it! Thank you

This Thread can be closed.