ConfigServer Community Forum

thank you for replying, sdjl. here is the rule from the mod security, it is the only rule with "etc" in it: ========== # file injection SecRule REQUEST_FILENAME|ARGS|ARGS_NAMES|REQUEST_HEADERS "(?:\b(?:\.(?:ht(?:access|passwd|group)|www_?acl)|global\.asa|httpd\.conf|boot\.ini)\b|\/etc...

I have the following problem: i have some websites using directories like "/etc". anytime the csf finds a reference to an /etc directory logs it, warns me and also denies IP access. i've noticed also that joomla/mambo and other pre-made scripts or cms's, are using /etc directories.... here...