Hello Mike,
I have a doubt, hope you can help me out.

In my server I have seen that the PCRE recursion error is only triggered when a searcher crawl is made, as an example:

Doing a whois on the IP 66.249.68.88, it shows:

Any idea on how to fix this error with the searchers?

Regards,

Sergio

sergio, did you set the PCRE limit in your modsec2.conf and in your php.ini ? Can you check what value it is, maybe it is too high. I read that 50,000 - 150,000 is ok.

It works fine for me, I only had the PCRE limit error when it was set too high (1000000)...

The only solution to pcre limiting in mod_security (natively) is to either disable it, or to set it higher. The logic in mod_security, for this feature, is something I don't agree with - if you exceed the limits, and its an attack that triggers a pcre limit, it should block the attack - instead it allows the attack to go thru (you dont get a DOS, but you might get owned).

In ASL, we disable this feature in mod_security, detect the DOS attacks, and shun them - if its a trigger its a trigger period.

I recommend you do the same.

Mike, What is the way to disable this in Mod_Security?

Compile mod_security with it disabled, or use our builds.

Ok, thanks.

yeah check out the ASL Lite thread on this, we've been putting together all the steps to do this on a cpanel system there.