Re: [mod-security-users] htaccess

[Christian B. <ch...@jw...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Just as an add-on to my previous response, you can apply rules for
a specific directory e.g. by nesting the rules inside the approriate
apache-container directives.

For example:

  <Directory /home/user/xyz/public_html>

	SecRule REMOTE_ADDR ...

  </Directory>

You can also use Location and LocationMatch.

Please note, that these directives (Directory, Location, LocationMatch)
are only valid in phases 2 and later. Thus, you currently cannot put
phase-1 rules into these locations.

Of you need to handle location-specific phase-1 rules, then you'll need
to chain rules and check the REQUEST_URI variable, e.g:

   SecRule REQUEST_URI "@startsWith /~xyz"  phase:1,chain,drop,status:403
      SecRule REMOTE_ADDR ...


(There will be an update coming which simplifies this, I believe.
@Brian/Breno: Is this already part of the latest release of was this 'planned' ?)


Regards,
   Chris


Am 26.10.2010 um 13:13 schrieb Morgan:

> Hello, Mod-security-users.
> 
> Is it possible to disable the Mod-security in the file. Htaccess to separate
> taken directories?
> tried to register in. htaccess SecRuleEngine off, gives 500 error.
> 
> --
> Sincerely,
> Morgan
>                       mailto:mo...@nm...
> 
> 
> ------------------------------------------------------------------------------
> Nokia and AT&T present the 2010 Calling All Innovators-North America contest
> Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
> $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
> Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
> http://p.sf.net/sfu/nokia-dev2dev
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Appliances, Rule Sets and Support:
> http://www.modsecurity.org/breach/index.html

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iD8DBQFMxwWGpc5/RcXDlTwRAgNgAJ9xjRBlLUUJFG4sdZl7pN72ttd09ACeNPDf
ULB3L6PvDlGN1BCxooJ1SRg=
=ivLM
-----END PGP SIGNATURE-----