1

i have installed drupal and installed couple of modules to provide the admin export to excel feature. when i click on the export button the page is getting redirected to Apache test page. I have done some R&D and commented #Include modsecurity.d/base_rules/*.conf in mod_security works fine. But i would not prefer to comment the base_rules as there may security threats.

I have not seen any errors in apache error logs. Any suggestion to fix.

Reference link on Drupal Stack. https://drupal.stackexchange.com/questions/198602/view-data-export-page-regdirecting-to-the-apache-error-page

6
  • Enable logging for mod_security & see which request it's blocking & which modsec rule caused it. github.com/SpiderLabs/ModSecurity/wiki/… Apr 28, 2016 at 9:26
  • I have added Sec DebugLog [code] <IfModule mod_security2.c> Include modsecurity.d/*.conf Include modsecurity.d/base_rules/*.conf Include modsecurity.d/modsecurity_localrules.conf SecDataDir /export/data/****/apache_logs SecDebugLog /export/data/*******/apache_logs/modsec/modsec-debug.log</IfModule> [code] I have noticed the log file is created but there are no log items in the file. Any help? Apr 28, 2016 at 10:14
  • Set value -> SecDebugLogLevel 9 and restart, access page and check the logs again Apr 28, 2016 at 10:38
  • Thank you friend. Now the logs are logged in the file. But unfortunately i see logs are filled with 65MB for 2 page refreshes. How do i find the exact issue? Apr 28, 2016 at 11:38
  • I have updated SecDebugLogLevel 9 with 1, 2 and 3 and see there are no logs updated. Apr 28, 2016 at 11:52

0

You must log in to answer this question.

Browse other questions tagged .