Re: [mod-security-users] @pmFromFile IP range question

[Christian B. <ch...@jw...>]

Hi Pheonix,

no, this is not possible. The @pm and @pmFromFile operator simply check
for containment of a string. 
In your example, REMOTE_ADDR will be checked if it contains either

   127.0.0.1    OR    69.22.0.0/16   OR    128.74.121.0/24


IIRC there was some action going on to implement a "real" range check for
IP addresses.

Chris


Am 18.05.2011 um 11:18 schrieb Phoenix Kiula:

> In case of IPs, can I use ranges, like this:
> 
>   The rule:
>   SecRule REMOTE_ADDR "@pmFromFile  WHITELISTED.conf"
> "phase:1,t:none,pass,nolog"
> 
>   And in the file:
>   127.0.0.1
>   69.22.0.0/16
>   128.74.121.0/24
> 
> 
> Thanks!
> 
> ------------------------------------------------------------------------------
> What Every C/C++ and Fortran developer Should Know!
> Read this article and learn how Intel has extended the reach of its 
> next-generation tools to help Windows* and Linux* C/C++ and Fortran 
> developers boost performance applications - including clusters. 
> http://p.sf.net/sfu/intel-dev2devmay
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> ModSecurity Services from Trustwave's SpiderLabs:
> https://www.trustwave.com/spiderLabs.php