[solved] erratic http error code

Felix Nawroth wrote:
>> !! SecDefaultAction log,auditlog,deny,status:400,\
>> !! phase:2,t:lowercase,t:replaceNulls,t:compressWhitespace
>> !!
>> !! <Location "/spanien/guest/guest.php">
>> !! SecRule ARGS "http"\
>> !! 
>> "deny,log,id:66023,severity:5,msg:'Spam',exec:/etc/modsecurity/ip-blacklist.pl"
>> !! </Location>

OK, I've solved it by redefining a status:400 in the rule. I had tried
that earlier without success, don't know what I'm doing different now.

So the status set in SecDefaultAction is not inherited into a Location,
it seems. I've also tried it with "SecRuleInheritance On", still the
same. This isn't mentioned in the manual, perhaps Ivan could add it?

Regards,
Felix

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV