Posts

Showing posts with the label modsecurity

phpmyadmin internal server error Access denied with code 44

[Mon Jan 20 13:22:35.175688 2020] [:error] [pid 35609] [client 117.248.109.14] ModSecurity: Access denied with code 44 (phase 2). Match of "eq 0" against "MULTIPART_UNMATCHED_BOUNDARY" required. [file "/etc/httpd/conf/extra/modsecurity.conf"] [line "79"] [msg "Multipart parser detected a possible unmatched boundary."] [hostname "115.112.176.43"] [uri "/phpmyadmin/import.php"] [unique_id "XiVcQ1j4kVXKj7EM10XaZQAAAAA"] ModSecurity: Access denied with code 44 -- Multipart parser detected a possible unmatched boundary SecRule MULTIPART_UNMATCHED_BOUNDARY "!@eq 0" \ "phase:2,t:none,log,status:44,msg:'Multipart parser detected a possible unmatched boundary.'" just remove the deny and save it and restart httpd If you want to be able to access your phpMyAdmin installation from any location add  Require all granted  before the  Require ip  line.

Request body no files data length is larger than the configured limit

[Mon Jan 13 13:52:50.559888 2020] [:error] [pid 36569] [client 117.248.109.14] ModSecurity: Request body no files data length is larger than the configured limit (131072).. Deny with code (413) [hostname "demo.dreamvisas.com"] [uri "/wp-admin/post.php"] [unique_id "Xhwo2j2X8QFBiXsUf-gsnQAAAAA"] /etc/httpd/conf.d/mod_security.conf SecRequestBodyNoFilesLimit 10000000 [Mon Jan 13 14:00:02.952013 2020] [:error] [pid 41565] [client 117.248.109.14] ModSecurity: Rule 7b0d378 [id "390572"][file "/etc/httpd/conf/extra/modsecurity.d/10_asl_rules.conf"][line "336"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "demo.dreamvisas.com"] [uri "/wp-admin/post.php"] [unique_id "Xhwqink8qj6200q6py1sEQAAABI"] Execution error - PCRE limits exceeded <LocationMatch /wp-admin/post.php> SecRuleRemoveById 390572 340157 390804 </LocationMatch>

Disable modsecurity For a Specific Directory

SecRuleEngine Off must work . Have you tried to put SecRuleEngine inside Directory: <Directory /var/www/site/phpMA> SecRuleEngine Off </Directory> instead of LocationMatch ?

modsecurity you don't have permission to access /phpmyadmin/import.php

[Thu Dec 26 14:17:31.929092 2019] [:error] [pid 19836] [client 219.91.251.164] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_UNMATCHED_BOUNDARY" required. [file "/etc/httpd/conf/extra/modsecurity.d/00_asl_zz_strict.conf"] [line "37"] [id "330792"] [msg "Multipart parser detected a possible unmatched boundary. This may be an impedence mismatch attack, a broken application or a broken connection.  This is not a false positive.  Check your application or client for errors."] [severity "CRITICAL"] [hostname "192.227.108.55"] [uri "/phpmyadmin/import.php"] [unique_id "XgRzo8Hz@CX9it2euowINQAAABA"] [Thu Dec 26 14:17:31.929314 2019] [:error] [pid 19836] [client 219.91.251.164] ModSecurity: Audit log: Failed to create subdirectories: /var/asl/data/audit/20191226/20191226-1417 (Permission denied) [hostname "192.227.108.55"] [uri "/phpmyadm...