Re: Google Analytics

If you could send a sanitized audit_log entry of this blocked request it would 
help with troubleshooting.

Thanks,
Ryan C. Barnett 

----- Original Message -----
From: mod-security-users-bounces@xxxxxxxxxxxxxxxxxxxxx 
<mod-security-users-bounces@xxxxxxxxxxxxxxxxxxxxx>
To: Jim Popovitch <yahoo@xxxxxxxxxx>; Mod Security 
<mod-security-users@xxxxxxxxxxxxxxxxxxxxx>
Sent: Sun May 20 09:42:08 2007
Subject: Re: [mod-security-users] Google Analytics

Hi Jim,

>From what I know, the urchin.js code should be loaded from google
server, and not from your server. Therefore, modsecurity should affect
this. Can you give some more information? Perhaps the rule that rejected
the requests, or the requests themselves?

As to your rule specifically: I don't know a HEADER variable in
modsecurity version 1, but please note that the rule will be true if the
HEADER variable is either empty, or not exists. And if this variable
doesn't exist (as I suspect it does) then your rule actually allows all
requests to "/".

Avi

-----Original Message-----
From: mod-security-users-bounces@xxxxxxxxxxxxxxxxxxxxx
[mailto:mod-security-users-bounces@xxxxxxxxxxxxxxxxxxxxx] On Behalf Of
Jim Popovitch
Sent: Saturday, May 19, 2007 2:54 AM
To: Mod Security
Subject: [mod-security-users] Google Analytics

I can't seem to get Google Analytics to work with mod-security enabled.
Any one care to share their rules to allow this?  The error I get is:

mod_security: Access denied with code 403. Pattern match "^$" at HEADER
[hostname "domain.tld"] [uri "/"]

But if I add this I don't see any more errors, but Google doesn't detect
the urchin.js code:

        SecFilterSelective HEADER "^$" chain
        SecFilterSelective REQUEST_URI "/" allow


Any help/ideas are appreciated.

Thx,

-Jim P.


------------------------------------------------------------------------
-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
mod-security-users mailing list
mod-security-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/mod-security-users

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
mod-security-users mailing list
mod-security-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/mod-security-users
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/