Yes Cris,

Also we are planning to add a @net/@ipaddr operator for SecRules. I will come into 2.6 series.

thanks

Breno

On Tue, Oct 26, 2010 at 11:44 AM, Christian Bockermann <chris@jwall.org> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Just as an add-on to my previous response, you can apply rules for
a specific directory e.g. by nesting the rules inside the approriate
apache-container directives.

For example:

 <Directory /home/user/xyz/public_html>

       SecRule REMOTE_ADDR ...

 </Directory>

You can also use Location and LocationMatch.

Please note, that these directives (Directory, Location, LocationMatch)
are only valid in phases 2 and later. Thus, you currently cannot put
phase-1 rules into these locations.

Of you need to handle location-specific phase-1 rules, then you'll need
to chain rules and check the REQUEST_URI variable, e.g:

  SecRule REQUEST_URI "@startsWith /~xyz"  phase:1,chain,drop,status:403
     SecRule REMOTE_ADDR ...


(There will be an update coming which simplifies this, I believe.
@Brian/Breno: Is this already part of the latest release of was this 'planned' ?)


Regards,
  Chris


Am 26.10.2010 um 13:13 schrieb Morgan:

> Hello, Mod-security-users.
>
> Is it possible to disable the Mod-security in the file. Htaccess to separate
> taken directories?
> tried to register in. htaccess SecRuleEngine off, gives 500 error.
>
> --
> Sincerely,
> Morgan
>                       mailto:morgan@nm.ru
>
>
> ------------------------------------------------------------------------------
> Nokia and AT&T present the 2010 Calling All Innovators-North America contest
> Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
> $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
> Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
> http://p.sf.net/sfu/nokia-dev2dev
> _______________________________________________
> mod-security-users mailing list
> mod-security-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Appliances, Rule Sets and Support:
> http://www.modsecurity.org/breach/index.html

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iD8DBQFMxwWGpc5/RcXDlTwRAgNgAJ9xjRBlLUUJFG4sdZl7pN72ttd09ACeNPDf
ULB3L6PvDlGN1BCxooJ1SRg=
=ivLM
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
mod-security-users mailing list
mod-security-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Appliances, Rule Sets and Support:
http://www.modsecurity.org/breach/index.html