Flameeyes/modsec-flameeyes — Issue #1: flameeyes_00_settings.conf blocks all traffic
Author: foomaster
Created: 2011-11-27 11:26:04+00:00
State: open

After including
flameeyes_00_settings.conf
and
flameeyes_40_exploits_blacklist.conf
all traffic is blocked.

Reason is according to modsec:

SecAction "phase:1,t:none,nolog,setvar:tx.ip_expiration=259200"

because "pass" is missing.

SecAction "phase:1,t:none,pass,nolog,setvar:tx.ip_expiration=259200"