modsecurity causing Internal Server Error

January 4, 2008 by gregorgede · Leave a Comment
Filed under: modsecurity, security 

one of our programmer complained that when his application run in our new server, it caused the following error :

Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator, admin@domain.com and inform them of the time the error occurred, and anything you might have done that may have caused the error.
More information about this error may be available in the server error log

so based on the information above i searched in the error log file of our new server, here’s the line that i suspected related with it :

[Fri Jan 04 10:02:51 2008] [error] [client 172.18.10.1] ModSecurity: Output filter: Response body too large (over limit of 524288, total length not known). [hostname "domain.com"] [uri "/folder/application.php"] [unique_id "vdNGNn8AAAEAAA1-HmEAAAAN"]

so then i went to directory where modsecurity rules reside and try to find in what file the limit was.

$ grep 524288 *conf

result

modsecurity_crs_10_config.conf:SecResponseBodyLimit 524288

the programmer told me before that his application was to view a sets of result from a select command. i think the problem is the size of the selection was too large and over the limit set in modsecurity_crs_10_config.conf.
when i asked him, he told me that the result is about 8000 records. no wonder……
so i suggested him to fix the selection, not to select all records at a time.

Tags:



Speak Your Mind

Tell us what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!