Re: [mod-security-users] Remove rule inside a rule
Brought to you by:
victorhora,
zimmerletw
Menu
▾
▴
Re: [mod-security-users] Remove rule inside a rule
|
From: Avi A. <av...@br...> - 2007-12-04 10:14:12
|
Hi again Nick, =20 Yes, SecRuleRemoveById cannot be chained to other rules. Version 2.5.0 = will have the ability to remove rules in runtime using the ctl action = (not included in the dev2 version currently available in the website, = but should be available in the next dev version). =20 In the meantime, you can do the following: * To make an exception based on location, you can use: <Location ^/somewhere/> SecRuleRemoveById 999999 </Location> =20 * For exclusions based on other parameters, see Ryan's blog entry: http://www.modsecurity.org/blog/archives/2007/02/handling_false.html =20 Avi ________________________________ =EE=E0=FA: mod...@li... =E1=F9=ED = Nick Gearls =F0=F9=EC=E7: =E2 04/12/2007 11:37 =E0=EC: mod...@li... =F0=E5=F9=E0: [mod-security-users] Remove rule inside a rule Hi, It seems that SecRuleRemoveByID cannot be used inside a chain, like in: SecRule ... ...,chain SecRuleRemoveByID ... How can we disable a rule (which is not the following one) based on some aspects of the request ? Thanks, Nick -------------------------------------------------------------------------= SF.Net email is sponsored by: The Future of Linux Business White Paper from Novell. From the desktop to the data center, Linux is going mainstream. Let it simplify your IT future. http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4 _______________________________________________ mod-security-users mailing list mod...@li... https://lists.sourceforge.net/lists/listinfo/mod-security-users |