I recently installed asl-lite on my server and everything seems to work.
Just have a quick look in the logs today morning and dicovered some strange entries about newattachment.php of my vBulletion installation. The strange thing is: It doesn`t seem that there was a rule hit
Maybe someone can point me to the right direction.
--edb5441e-A--Note: I have edited out URL and IP of my site just to be safe and because its not really safe for work
[20/Apr/2012:00:36:57 +0200] T5CTU1UReiMAAGGACSQAAAAB 188.8.131.52 43250 [color=#FF0000]xxx[/color] 80
POST /newattachment.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----------cH2ae0gL6Ij5Ij5KM7ae0Ef1ae0gL6
User-Agent: Shockwave Flash
Cookie: bb_lastvisit=1333385389; bb_lastactivity=0
HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=iso-8859-1
Apache-Error: [file "core.c"] [line 3706] [level 3] File does not exist: /home/web1/public_html/400.shtml
Stopwatch: 1334874963956498 53536998 (- - -)
Stopwatch2: 1334874963956498 53536998; combined=215, p1=83, p2=0, p3=18, p4=102, p5=11, sr=0, sw=1, l=0, gc=0
WAF: ModSecurity for Apache/2.6.5 (http://www.modsecurity.org/).
For me it seems that there is a normal server error (why?) and despite the fact that it will be an upload of files apache tries later on to display the not set 404-Error-Page.
Even if its not really something with the rules; hopeing for your ideas and support.
Thanks and best regards,