ModSecurity

I am trying to only log requests whose REQUEST_URI is of the form
"/statusnet/api/statuses/update.xml"

Here is how I tried to do this:


SecRuleEngine On
SecAuditEngine On
SecAuditLogType Concurrent
SecAuditLogStorageDir C:/xampp/audit_log/data/
SecAuditLog C:/xampp/audit_log/index

#Log everything
SecAuditLogParts ABCDEFGHZ

#Don't want to log all requests to the audit log
SecDefaultAction "nolog,noauditlog,pass,phase:2"

#Only want to match /statusnet/api/statuses/update.xml
SecRule REQUEST_URI "^/statusnet/api/statuses/update\.xml$"
"auditlog,pass,phase:2"



Obviously, my approach is not working. I have been over the documentation
several times, but cannot find what I am looking for. Any help would be
greatly appreciated.

Thanks,

Robert

Is there a windows binary for this somewhere?

Thanks,

Robert

On Mon, Jul 5, 2010 at 3:58 PM, JASPREET BINDRA
<jaspreet.bindra@...:

>
> so my query is that my reverse proxy should work in such a way that any
> external  request from Internet World
>
> a)for internal1.example.com should map to internal1.example.com and
>
> b)internal2.example.com should map to internal2.example.com and
>
> c) internal3.example.com should point to internal3 .example.com
>
>
>

Hi JASPREET,

You can create three virtual hosts files, which include something like:

<VirtualHost 1.2.3.4:80>
  ServerName internal1.example.com
  ProxyPass / http://internal1.example.com/
  ProxyPassReverse / http://interna1.example.com/

  # Other configuration settings here ...
  # ...

</VirtualHost>

Then set the IP address in internal1.example.com in the hosts file, e.g.:
2.3.4.5  internal1.example.com

--
 - Josh

Dear ALL 

 

I am a newbie at Mod-Security and my web servers are Windows Based (IIS in
particular). I will be using mod-security with Apache in Reverse-proxy Mode.
Now I have a particular requirement with respect to apache working in
reverse-proxy mode 

 

 Well i have a very peculiar question for reverse proxy 

 

In my netwrok there are different internal web servers hosting different web
applications eg 

i have three webserver(IIS) and they have different web applications serverd


 

let say the websites are :http://internal1.example.com hosted on internal1
machine 

http://internal2.example.com hosted on internal2 machine and
http://internal3.example.com hosted on internal3 machine

 

so my query is that my reverse proxy should work in such a way that any
external  request from Internet World 

a)for internal1.example.com should map to internal1.example.com and 

b)internal2.example.com should map to internal2.example.com and 

c) internal3.example.com should point to internal3 .example.com

 

so in all there are three web servers hosting 3 web websites. so my
questions is what will be the reverse proxying configuration and
architecture for this scenario ?

 

thanks

Jaspreet



THIS MAIL IP/VPN HAS BEEN SCANNED BY MCAFEE e-APPLIANCE