Re: [mod-security-users] IP Bypas for Mod security 2.7.3

[Sushant V. <sve...@jn...>]

Hi Josh

Can you suggest an option as to how I can prioritize the order of the rules?

Thanks
Sushant

On 5/16/13 1:31 PM, Josh Amishav-Zlatin wrote:
> On Thu, May 16, 2013 at 11:14 PM, Sushant Vengurlekar 
> <sve...@jn... <mailto:sve...@jn...>> wrote:
>
>     Hi Josh
>
>     The IP bypass rule that I used is
>     SecRule REMOTE_ADDR "^64\.58\.154\.194$"
>     phase:1,log,allow,ctl:ruleEngine=Off,id:999945
>
>
> Hi Sushant,
>
> The CRS rule 960032 is firing before your whitelist rule is executed, 
> thus when you send a request using the PROPFIND method you receive a 
> 403 response. Can you include your whitelist rule before including the 
> CRS?
>
> --
>  - Josh