سلام دوستان و اساتید سرور
من وقتی میخوام توی ادمین انجمن تنظیماتی انجام بدم این ارور را دریافت میکنم
بعدش این ایمیل را به من میزنهکد:You don't have permission to access /forum/admin/index.php on this server.
بعدش آی پی من را بلوک کرد که با CSF تونستم از بلوک دربیارمکد:[Wed Jan 11 12:27:27 2012] [error] [client 2.180.60.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\.\\\\./\\\\.\\\\.|/)" at ARGS:module. [file "/usr/local/apache/conf/modsec_rules/99_asl_jitp.conf"] [line "4473"] [hostname "****.ir"] [uri "/forum/admin/index.php"]
فقط مشکل اینجاست که باید چیکار کنم تا ارور 403 نده و بتونم توی مدیریت تنظیمات انجام بدم؟
تنظیمات قسمت mod security هستش
کد:SecServerSignature "Web Server" # ConfigServer ModSecurity whitelist file Include /usr/local/apache/conf/modsec2.whitelist.conf #RBL Rules #Include /usr/local/apache/conf/modsec_rules/00_asl_rbl.conf #Whitelisting Rules Include /usr/local/apache/conf/modsec_rules/00_asl_whitelist.conf #Exclusion Rules Include /usr/local/apache/conf/modsec_rules/05_asl_exclude.conf #Scan uplaoded files with clamav #Include /usr/local/apache/conf/modsec_rules/05_asl_scanner.conf #Malware Blacklist Rules #Include /usr/local/apache/conf/modsec_rules/10_asl_antimalware.conf #Web Application Protection Rules Include /usr/local/apache/conf/modsec_rules/10_asl_rules.conf #Bad Useragent Signatures Include /usr/local/apache/conf/modsec_rules/20_asl_useragents.conf #Additional Malware Blacklisting Rules #Include /usr/local/apache/conf/modsec_rules/30_asl_antimalware.conf #Anti-spam Signatures #Include /usr/local/apache/conf/modsec_rules/30_asl_antispam.conf #Enhanced Apache 2.x rules Include /usr/local/apache/conf/modsec_rules/40_asl_apache2-rules.conf #Anti Rootkit Signatures Include /usr/local/apache/conf/modsec_rules/50_asl_rootkits.conf #"Google Hacks" signatures Include /usr/local/apache/conf/modsec_rules/60_asl_recons.conf #Just In Time Patches Include /usr/local/apache/conf/modsec_rules/99_asl_jitp.conf #Domain Spam Whitelist Include /usr/local/apache/conf/modsec_rules/domain-spam-whitelist.conf #Trusted domains Include /usr/local/apache/conf/modsec_rules/trusted-domains.conf





پاسخ با نقل قول