Re: erratic http error code

!! SecDefaultAction log,auditlog,deny,status:400,\
!! phase:2,t:lowercase,t:replaceNulls,t:compressWhitespace
!!
!! <Location "/spanien/guest/guest.php">
!! SecRule ARGS "http"\
!! 
"deny,log,id:66023,severity:5,msg:'Spam',exec:/etc/modsecurity/ip-blacklist.pl"
!! </Location>

are you aware that rules inside directives (location, directory, virtualhost)
are read and performed after phase 1?
So the question is, if there is a rule that matches before, probably in
phase 1

Achim


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV