Dear Friends,
I has Centos 4 and installed mod_security 1.9.4 on apache. I configurated mod_security to work with clamav using documentation below.
http://www.modsecurity.org/documentation/modsecurity-apache/1.9.3/html-multi...
But, when I do upload files using Squirrelmail, the module clamav not found files to scan, apache send for clamav NAME FILES differents.
LOG AUDTLOG -> MODSECURITY
mod_security-message: Access denied with code 500. Error verifying files: File "/tmp/webfiles/20090227-082448-192.168.1.11-" rejected by the approver script "/data/scripts/modsec-clamscan.pl" [severity "EMERGENCY"] mod_security-action: 500
FILES IN directory /TMP/WEBFILES
-rw-r----- 1 apache clamav 17408 Fev 27 07:45 20090227-074544-192.168.1.11-ALESP_transmiss__o_de_arquivo.xls -rw-r----- 1 apache clamav 209 Fev 27 07:47 20090227-074718-192.168.1.11-copia_apaga.txt -rw-r----- 1 apache clamav 2046 Fev 27 07:47 20090227-074734-192.168.1.11-button_buy_now.gif -rw-r----- 1 apache clamav 565248 Fev 27 08:10 20090227-081019-192.168.1.11-2008_07_02_Modelo_de_Negocio.doc -rw------- 1 apache clamav 567136 Fev 27 08:10 20090227-081019-192.168.1.11-request_body-fm7R5G -rw-r----- 1 apache clamav 143872 Fev 27 08:19 20090227-081922-192.168.1.11-cronexcel.xls -rw------- 1 apache clamav 145746 Fev 27 08:19 20090227-081922-192.168.1.11-request_body-qKnmIb -rw-r----- 1 apache clamav 143872 Fev 27 08:24 20090227-082440-192.168.1.11-cronexcel.xls -rw------- 1 apache clamav 145749 Fev 27 08:24 20090227-082440-192.168.1.11-request_body-oVdaFT -rw-r----- 1 apache clamav 2046 Fev 27 08:30 20090227-083027-192.168.1.11-button_buy_now.gif -rw-r----- 1 apache clamav 143872 Fev 27 08:30 20090227-083059-192.168.1.11-cronexcel.xls -rw------- 1 apache clamav 145769 Fev 27 08:30 20090227-083059-192.168.1.11-request_body-27efAj
There is not files to scan parse among modsecurity and directory /tmo/webfiles
Please, I need help.
Thanks
Adriano