mod_security and Drupal 6.2 issues.

2Oct/082

mod_security and Drupal 6.2 issues.

If you're going to be using Drupal with mod_security, making the following changes will probably save you some frustration later .

<LocationMatch "/">
SecRuleRemoveById 960010
SecRuleRemoveById 960015
SecRuleRemoveById 960032
SecRuleRemoveById 950107
</LocationMatch>

Also, set SecResponseBodyLimit and SecRequestBodyInMemoryLimit to something like 51200000 and 12288000 respectively. They may seem a bit high, but if you're managing a lot of Drupal users and permissions I've run into problems with them.

Happy Drupal-ing.

Share and Enjoy:

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

Tagged as: drupal, Linux, mod_security, php Leave a comment

Comments (2) Trackbacks (3) ( subscribe to comments on this post )

PiciMaci
December 22nd, 2008 - 14:04

Hi!

Please explain me why? What are these rules watching and which function are they blocking?

( REPLY )
epiraces
February 24th, 2010 - 09:03

Hi,

It would be great if you can post on why these rules are required. They were quite helpful for me. I linked them from this post http://drupal.org/node/717738#comment-2622358 but not so sure how to explain them

( REPLY )