apache access problem

[barry905]

i've just implemented a small test web site on FC6 using the distributed version of apache. after a little trial and error i got the thing working, but i have one remaining problem. the server hosting the site is has the hostname "bluebottle" and ip address 192.168.0.5 and i am using dnsmasq as a nameserver, on which this combination is configured.

when i try to access the site through a web browser on my lan using "bluebottle" i can access everything, but when i try "192.168.0.5" i get the following on my browser:

Bad Request

Your browser sent a request that this server could not understand.
Apache/2.2.0 (Fedora) Server at 192.168.0.5 Port 80

and this line in my error_log file:

[Mon Aug 20 22:26:01 2007] [error] [client 192.168.0.100] ModSecurity: Access denied with code 400 (phase 1). Pattern match "^[\\\\d\\\\.]+$" at REQUEST_HEADERS:Host. [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [hostname "192.168.0.5"] [uri "/"] [unique_id "YNzFIH8AAAEAAAqHEBUAAAAA"]


if anyone out there has any ideas i would appreciate it.

barry

[tw56]

I'm no mod_security expert but I do use it. Try going into /etc/httpd/conf.d/mod_securtity.conf and comment out the line ..Include modsecurity.d/modsecurity_localrules.conf with a # in front of it and see it that will work .

[barry905]

thanks for the direction - turns out the modsecurity.d/modsecurity_localrules.conf file is merely a dummy and contains no data, but a little searching and i found the rule that was being violated in modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf. i simply commented out that rule, and the identical rule in the file of the same name in the blocking sub-directory, and that fixed the problem.

once again, thank you for your insight. it got me to the solution

barry