mihomes - 5:23 pm on Oct 22, 2012 (gmt 0)
Hi Lucy... I've had some great questions lately haha.
At the moment I have 400,401,403,404,500, and now 501 pages in /usr/local/apache/htdocs/ which should be the default error pages for my server. Would it be a good idea to create pages for all the rest?
Here is, what I think, the problem is. If I go to any of my sites and try to access https of any page I get a connection error from the browser, no 'error page'... this then triggers modsec and then after a few times triggers CSF which perm blocks me.
I cannot remember the default action that should happen, but shouldn't an error page from /usr/local/apache/htdocs/, or the site in question if it has one set, be shown rather than this connection page? This is what is setting off modsec.
Another person mentioned the LF_APACHE_404 setting in CSF, but this has always been disabled and is not the problem.