Re: Newbie questions, please help

> Michael David wrote:
> 
> I'm a new user of mod security, still usng detection only mode. I see
> these in my apache error_log, what do they mean?
> 
> 1: ModSecurity: Regex processing failed: (null)

This denotes is an error in a regular expression in a rule. The latest
version of ModSecurity would refuse to load with a faulty regular
expression and would pinpoint the problematic rule. Are you using the
latest version (2.0.3 at least)?

> 
> 2: ModSecurity: Audit log: Failed to lock global mutex: Permission
denied
> 
> 3: ModSecurity: Audit log: Failed to unlock global mutex: Permission
> denied

I think that this is a bug that was solved also in the latest release.

> 
> 4: ModSecurity: Warning. Pattern match
>
"(?:\\\\b(?:.(?:ht(?:access|passwd|group)|www_?acl)|global.asa|httpd.con
f|
> boot.ini)\\\\b|\\\\/etc\\\\/)" at REQUEST_FILENAME.
> 
> 5: ModSecurity: Warning. Pattern match "\\\\b(?:google(?:-
> sitemaps|bot)|mediapartners-google)\\\\b" at
REQUEST_HEADERS:User-Agent.
> (Is this googlebot?)
> 

This are the events that ModSecurity issues. The 1st might be an attack
attempt, and the 2nd one points out the Google indexed your site.

> Again, I'm a brand new user, please excuse the newbie questions.
> 

We are here to help

~ Ofer


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV