Dear Friends,

I has Centos 4 and installed mod_security 1.9.4 on apache. I 
configurated mod_security to work with clamav using documentation below.


http://www.modsecurity.org/documentation/modsecurity-apache/1.9.3/html-multipage/06-special_features.html



But, when I do upload files using Squirrelmail, the module clamav not 
found files to scan, apache send for clamav  NAME FILES differents.

LOG AUDTLOG -> MODSECURITY

mod_security-message: Access denied with code 500. Error verifying 
files: File "/tmp/webfiles/20090227-082448-192.168.1.11-" rejected by 
the approver script "/data/scripts/modsec-clamscan.pl" [severity 
"EMERGENCY"]
mod_security-action: 500


FILES IN directory  /TMP/WEBFILES

-rw-r-----   1 apache clamav  17408 Fev 27 07:45 
20090227-074544-192.168.1.11-ALESP_transmiss__o_de_arquivo.xls
-rw-r-----   1 apache clamav    209 Fev 27 07:47 
20090227-074718-192.168.1.11-copia_apaga.txt
-rw-r-----   1 apache clamav   2046 Fev 27 07:47 
20090227-074734-192.168.1.11-button_buy_now.gif
-rw-r-----   1 apache clamav 565248 Fev 27 08:10 
20090227-081019-192.168.1.11-2008_07_02_Modelo_de_Negocio.doc
-rw-------   1 apache clamav 567136 Fev 27 08:10 
20090227-081019-192.168.1.11-request_body-fm7R5G
-rw-r-----   1 apache clamav 143872 Fev 27 08:19 
20090227-081922-192.168.1.11-cronexcel.xls
-rw-------   1 apache clamav 145746 Fev 27 08:19 
20090227-081922-192.168.1.11-request_body-qKnmIb
-rw-r-----   1 apache clamav 143872 Fev 27 08:24 
20090227-082440-192.168.1.11-cronexcel.xls
-rw-------   1 apache clamav 145749 Fev 27 08:24 
20090227-082440-192.168.1.11-request_body-oVdaFT
-rw-r-----   1 apache clamav   2046 Fev 27 08:30 
20090227-083027-192.168.1.11-button_buy_now.gif
-rw-r-----   1 apache clamav 143872 Fev 27 08:30 
20090227-083059-192.168.1.11-cronexcel.xls
-rw-------   1 apache clamav 145769 Fev 27 08:30 
20090227-083059-192.168.1.11-request_body-27efAj


There is not files to scan parse among modsecurity and directory 
/tmo/webfiles


Please, I need help.

Thanks


Adriano

_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Reply via email to