I was actually looking to do something similar, thanks.  Is there a way to combine conditions, eg. I want to disable a rule only for a particular request filename AND user-agent combo?

On Oct 29, 2013, at 1:59 PM, Jose Pablo Valcárcel Lázaro

Here you can find a link where author manage a false positive removing rule id under some circustances (in this case, trying to access a file) :https://blog.chesterton.id.au/2011/03/21/mod_security-false-positives/

SecRule REQUEST_FILENAME "^/blog/2007/11/20/blue-tongue-harmonica-talk-cd/(index.php)?$" "nolog,pass,ctl:RuleRemoveById=958821"

Could you do something similar in your rule? 

Kind regards,

Aaron Macks
Systems Architect

Harvard Business Publishing
300 North Beacon St.    |   Watertown, MA 02472
(617) 783-7461                |   Fax: (617) 783-7467
www.harvardbusiness.org |   Cell:(978) 317-3614