Re: [Mailman-Users] ModSecurity false positive on list options pages

2017-10-10 Thread Mark Sapiro
On 10/10/2017 11:54 AM, Russell Clemings wrote: > > I'm posting this mostly for the sake of anyone else who runs into this > problem. If there's a simple fix on the Mailman side, though, so much the > better. Maybe substitute another character for the dot? It would be fairly simple to modify Mai

[Mailman-Users] ModSecurity false positive on list options pages

2017-10-10 Thread Russell Clemings
Using OWASP ModSecurity Core Rule Set ver.3.0.2 on cPanel v66.0.23; CentOS 7.3, Mailman 2.1.23: ModSecurity with the OWASP rules (which come with cPanel nowadays) doesn't like Mailman's list options url for some email addresses. Specifically a URL in the form http://lists.xxx.xxx/mailman/options/