Dear Friends,
I has Centos 4 and installed mod_security 1.9.4 on apache. I
configurated mod_security to work with clamav using documentation below.
http://www.modsecurity.org/documentation/modsecurity-apache/1.9.3/html-multipage/06-special_features.html
But, when I do upload files using Squirrelmail, the module clamav not
found files to scan, apache send for clamav NAME FILES differents.
LOG AUDTLOG -> MODSECURITY
mod_security-message: Access denied with code 500. Error verifying
files: File "/tmp/webfiles/20090227-082448-192.168.1.11-" rejected by
the approver script "/data/scripts/modsec-clamscan.pl" [severity
"EMERGENCY"]
mod_security-action: 500
FILES IN directory /TMP/WEBFILES
-rw-r----- 1 apache clamav 17408 Fev 27 07:45
20090227-074544-192.168.1.11-ALESP_transmiss__o_de_arquivo.xls
-rw-r----- 1 apache clamav 209 Fev 27 07:47
20090227-074718-192.168.1.11-copia_apaga.txt
-rw-r----- 1 apache clamav 2046 Fev 27 07:47
20090227-074734-192.168.1.11-button_buy_now.gif
-rw-r----- 1 apache clamav 565248 Fev 27 08:10
20090227-081019-192.168.1.11-2008_07_02_Modelo_de_Negocio.doc
-rw------- 1 apache clamav 567136 Fev 27 08:10
20090227-081019-192.168.1.11-request_body-fm7R5G
-rw-r----- 1 apache clamav 143872 Fev 27 08:19
20090227-081922-192.168.1.11-cronexcel.xls
-rw------- 1 apache clamav 145746 Fev 27 08:19
20090227-081922-192.168.1.11-request_body-qKnmIb
-rw-r----- 1 apache clamav 143872 Fev 27 08:24
20090227-082440-192.168.1.11-cronexcel.xls
-rw------- 1 apache clamav 145749 Fev 27 08:24
20090227-082440-192.168.1.11-request_body-oVdaFT
-rw-r----- 1 apache clamav 2046 Fev 27 08:30
20090227-083027-192.168.1.11-button_buy_now.gif
-rw-r----- 1 apache clamav 143872 Fev 27 08:30
20090227-083059-192.168.1.11-cronexcel.xls
-rw------- 1 apache clamav 145769 Fev 27 08:30
20090227-083059-192.168.1.11-request_body-27efAj
There is not files to scan parse among modsecurity and directory
/tmo/webfiles
Please, I need help.
Thanks
Adriano
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
