500 errors after a 403 error

Helicon Ape provides support for Apache .htacces and .htpasswd configuration files for Microsoft IIS.
User avatar
Posts: 1
Joined: 27 Feb 2018, 17:11

500 errors after a 403 error

27 Feb 2018, 17:34

We have been experiencing a strange problem with Helicon Ape on Win2K12R2.

Whenever a RedirectMatch 403 rule is triggered on a site then *ALL* subsequent requests to that site (valid or not) will result in 500 errors for a period of exactly 300 seconds, after which the site in IIS starts serving normal 200 responses again. Disabling all entries from the .htaccess of course resolves the issue but defeats the purpose of having Helicon Ape in the first place.

An example .htaccess would be:

<IfModule mod_alias.c>
RedirectMatch 403 (?i)([a-z0-9]{2000})
RedirectMatch 403 (?i)(https?|ftp|php):/
RedirectMatch 403 (?i)(base64_encode)(.*)(\()
RedirectMatch 403 (?i)(=\'|=\%27|/\'/?)\.
RedirectMatch 403 (?i)/(\$(\&)?|\*|\"|\.|,|&|&amp;?)/?$
RedirectMatch 403 (?i)(\{0\}|\(/\(|\.\.\.|\+\+\+|\\"\\")
RedirectMatch 403 (?i)(~|`|<|>|:|;|,|%|\|\s|\{|\}|\[|\]|\|)
RedirectMatch 403 (?i)/(=|\$&|_mm|cgi-|etc/passwd|muieblack)
RedirectMatch 403 (?i)(&pws=0|_vti_|\(null\)|\{\$itemURL\}|echo(.*)kae|etc/passwd|eval\(|self/environ)
RedirectMatch 403 (?i)\.(aspx?|bash|bak?|cfg|cgi|dll|exe|git|hg|ini|jsp|log|mdb|out|sql|svn|swp|tar|rar|rdf)$
RedirectMatch 403 (?i)/(^$|(wp-)?config|mobiquo|phpinfo|shell|sqlpatch|thumb|thumb_editor|thumbopen|timthumb|webshell)\.php
</IfModule>

Anyone know a fix for resolving 300 seconds of HTTP 500 errors after a RedirectMatch 403 is triggered?

Return to Helicon Ape

Who is online

Users browsing this forum: No registered users and 5 guests