'lo there,

I'm trying to get a basic install of ReviewBoard working using apache,
mod_python, sqlite.  After much excitement, I'm able to login, create
new users, etc.  But... when I try to create a new review (either
through the Web UI or through post-review), I get a big old 501 fail,
and the error logs in apache say like so:

[Tue Jul 07 17:19:33 2009] [error] [client 204.9.221.74] ModSecurity:
Access denied with code 501 (phase 2). Pattern match "(?:\\\\b(?:(?:n
(?:et(?:\\\\b\\\\W+?\\\\blocalgroup|\\\\.exe)|(?:map|c)\\\\.exe)|t
(?:racer(?:oute|t)|elnet\\\\.exe|clsh8?|ftp)|(?:w(?:guest|sh)|rcmd|ftp)
\\\\.exe|echo\\\\b\\\\W*?\\\\by+)\\\\b|c(?:md(?:(?:32)?\\\\.exe\\\\b|\\
\\b\\\\W*?\\\\/c)|d(?:\\\\b\\\\W*?[\\\\\\\\/]|\\\\W*?\\\\.\\\\.)|hmod.
{0,40}? ..." at ARGS:basedir. [id "950006"] [msg "System Command
Injection. Matched signature </python>"] [severity "CRITICAL"]
[hostname "tuscany.hubteam.com"] [uri "/r/new/"] [unique_id
"Lc6crX8AAAEAAGqsV6EAAAAA"]

This seems like some bad interaction between reviewboard and
mod_security, but i do not know much about mod_security, and have no
idea where to start.  Does anyone have any sage advice on where to go
from here?

Thanks,
-Dan Milstein

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"reviewboard" group.
To post to this group, send email to reviewboard@googlegroups.com
To unsubscribe from this group, send email to 
reviewboard+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/reviewboard?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to