Re: mod security and error message displaying

On 9/11/06, Johnny GoLightly <mywebquestion@xxxxxxxxxxxx> wrote:
>
> Hi,
>
> My question relates to the directive:
>
>  SecFilterDefaultAction "deny,log,status:500"
>
> The directive says reject a request with status 500 (if a mod sec rule is
> triggered).
>
> Question:  Does mod sec tell apache to display the error page per the
> httpd.conf file for which the associated directive is:
>
> ErrorDocument 500 /error/custom500.html
>
> We have been testing and it doesnt display our custom error message so
> wantred to check what the proper behavior is supposed to be.

The ErrorDocument should be honoured. What behaviour do you get exactly?

-- 
Ivan Ristic, Technical Director
Thinking Stone, http://www.thinkingstone.com
ModSecurity: Open source Web Application Firewall

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642