Hi all,
I recently installed asl-lite on my server and everything seems to work.
Just have a quick look in the logs today morning and dicovered some strange entries about newattachment.php of my vBulletion installation. The strange thing is: It doesn`t seem that there was a rule hit
Maybe someone can point me to the right direction.
Code:
--edb5441e-A--
[20/Apr/2012:00:36:57 +0200] T5CTU1UReiMAAGGACSQAAAAB 46.115.40.118 43250 [color=#FF0000]xxx[/color] 80
--edb5441e-B--
POST /newattachment.php HTTP/1.1
Accept: text/*
Content-Type: multipart/form-data; boundary=----------cH2ae0gL6Ij5Ij5KM7ae0Ef1ae0gL6
User-Agent: Shockwave Flash
Host: [color=#FF0000]xxx[/color]
Content-Length: 574807
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: bb_lastvisit=1333385389; bb_lastactivity=0
--edb5441e-F--
HTTP/1.1 400 Bad Request
Content-Length: 345
Connection: close
Content-Type: text/html; charset=iso-8859-1
--edb5441e-H--
Apache-Error: [file "core.c"] [line 3706] [level 3] File does not exist: /home/web1/public_html/400.shtml
Stopwatch: 1334874963956498 53536998 (- - -)
Stopwatch2: 1334874963956498 53536998; combined=215, p1=83, p2=0, p3=18, p4=102, p5=11, sr=0, sw=1, l=0, gc=0
WAF: ModSecurity for Apache/2.6.5 (http://www.modsecurity.org/).
Server: Apache
--edb5441e-Z--
Note: I have edited out URL and IP of my site just to be safe and because its not really safe for work 
For me it seems that there is a normal server error (why?) and despite the fact that it will be an upload of files apache tries later on to display the not set 404-Error-Page.
Even if its not really something with the rules; hopeing for your ideas and support.
Thanks and best regards,
Matthias