Re: It's too sensitive and I must be missing something.

I've uploaded a bunch of logs here - first the Apache logs:

http://d.pr/f/Cf8C

Here's an audit log:

http://d.pr/f/TK6N

In order to get the audit logs - I added this to the config:

SecAuditEngine On
SecAuditLog /var/log/apache2/modsecurity-audit.log
SecAuditLogParts ABCDEFGHIJKZ

and changed this line:

SecDefaultAction "phase:2,pass,log"

That help?

On Wed, Jun 20, 2012 at 9:17 AM, Darron Froese <dfroese <at> gmail.com> wrote:
> I will re-enable it and get some more logs tonight.
> --
> darron froese
> vp technology
> nonfiction studios inc.
> f 403 686 8887
> c 403 819 7887
>
> On 2012-06-19, at 1:58 PM, Josh Amishav-Zlatin <jamuse <at> gmail.com> wrote: