[TYPO3-english] typo3 problem caused by mod_security

Xavier Perseguers typo3 at perseguers.ch
Thu Jan 7 08:35:54 CET 2010


Hi জয়দীপ বক্সী,

> Has anyone using typo3 along with apache mod_security ? I have installed
> and activated mod_security in a development server powered by debian

Yes! But...

> [...]
> Is there any rule sets which can allow
> typo3 working well with it ?

http://typo3.org/waf.txt

There's a dedicated mailing list for this project (typo3.projects.waf) 
although I must admit I sent a message in a few days 1 year ago and it 
got no answer ;-) Meaning, English seems the most appropriate list anyway.

Frankly speaking, as the waf.txt file is not maintained, I suggest you 
simply deactivate ModSecurity for /typo3.

If you wish to start updating waf.txt anyway (this would be really great 
btw), just do it and get in touch with me (email) with your changes, 
I'll be happy to review them and will see with other core members to 
make sure this project gets "resurrected".

Greets

-- 
Xavier Perseguers
http://xavier.perseguers.ch/en


More information about the TYPO3-english mailing list