store | blogs | forums | twitter | facebook | wiki | downloads | support portal
Atomic Secure Linux
It is currently Tue Sep 16, 2014 5:29 pm

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 7 posts ] 
Author Message
 Post subject: Directory index forbidden
Unread postPosted: Wed Apr 28, 2010 7:36 am 
Offline
New Forum User
New Forum User

Joined: Mon Jun 15, 2009 10:30 am
Posts: 4
Is it possible to tell mod_security not to log errors direct from Apache. I see client sites that have issues cause the following error..

Code:
Apache-Error: [file "/builddir/build/BUILD/httpd-2.2.3/modules/generators/mod_autoindex.c"] [line 2274] [level 3] Directory index forbidden by Options directive: /path/to/dir/, referer: http://www.example.com/referer
Apache-Handler: httpd/unix-directory


These aren't really security issues and produce a lot of logging, especially in the Z section. Any advice appreciated.


Top
 Profile  
 
 Post subject: Re: Directory index forbidden
Unread postPosted: Wed Apr 28, 2010 10:02 am 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 7899
Location: earth
In ASL these are classified as level 5 alerts and dont show up by default


Top
 Profile  
 
 Post subject: Re: Directory index forbidden
Unread postPosted: Thu Apr 29, 2010 8:21 am 
Offline
New Forum User
New Forum User

Joined: Mon Jun 15, 2009 10:30 am
Posts: 4
AH. I guess I should take from your answer, that there is no way to stop it being logged.


Top
 Profile  
 
 Post subject: Re: Directory index forbidden
Unread postPosted: Thu Apr 29, 2010 8:35 am 
Offline
Long Time Forum Regular
Long Time Forum Regular

Joined: Thu Dec 09, 2004 11:19 am
Posts: 2049
Yeah, our report emails are nearly 300Kb each, once per hour per machine, due to ossec logging everything. It is a PITA.

I understand that this issue is not going to happen in 2.2.6 though - I can't wait for it to come out :-)

It is in -testing if you want to have a go now.

Faris.

_________________
--------------------------------
<advert>
If you want to rent a UK-based VPS that comes with friendly advice and support from a fellow ART fan, please get in touch.
</advert>


Top
 Profile  
 
 Post subject: Re: Directory index forbidden
Unread postPosted: Thu Apr 29, 2010 8:37 am 
Offline
Forum Regular
Forum Regular

Joined: Tue Jul 15, 2008 2:38 pm
Posts: 770
Location: Sweden
Sorry for asking what might be a stupid question, but but isn't there a rule number indicating which rule is being triggered? What about disabling/modifying that rule?


Top
 Profile  
 
 Post subject: Re: Directory index forbidden
Unread postPosted: Thu Apr 29, 2010 9:17 am 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 7899
Location: earth
No because its not coming from mod_security, its just a general apache error code (401 auth denied, 403 from a directory index forbidden, etc)


Top
 Profile  
 
 Post subject: Re: Directory index forbidden
Unread postPosted: Mon Jun 28, 2010 10:02 pm 
Offline
Forum Regular
Forum Regular

Joined: Thu Oct 26, 2006 11:56 pm
Posts: 678
Set up a script using sed to remove them from the logs :)


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group