I have this rule that block any ip of my customer, but is a false positive? I don't understand what do it
Access denied with code 501 (phase 2). Match of "rx ^((?
?:POS|GE)T|OPTIONS|HEAD))$" against "REQUEST_METHOD" required. [file "/usr/local/apache/conf/modsec2.user.conf"] [line "38"] [id "960032"] [msg "Method is not allowed by policy"] [severity "CRITICAL"] [tag "POLICY/METHOD_NOT_ALLOWED"]
Access denied with code 501 (phase 2). Match of "rx ^((?