Re: [mod-security-users] @pmFromFile IP range question
Brought to you by:
victorhora,
zimmerletw
From: Christian B. <ch...@jw...> - 2011-05-18 09:29:08
|
Hi Pheonix, no, this is not possible. The @pm and @pmFromFile operator simply check for containment of a string. In your example, REMOTE_ADDR will be checked if it contains either 127.0.0.1 OR 69.22.0.0/16 OR 128.74.121.0/24 IIRC there was some action going on to implement a "real" range check for IP addresses. Chris Am 18.05.2011 um 11:18 schrieb Phoenix Kiula: > In case of IPs, can I use ranges, like this: > > The rule: > SecRule REMOTE_ADDR "@pmFromFile WHITELISTED.conf" > "phase:1,t:none,pass,nolog" > > And in the file: > 127.0.0.1 > 69.22.0.0/16 > 128.74.121.0/24 > > > Thanks! > > ------------------------------------------------------------------------------ > What Every C/C++ and Fortran developer Should Know! > Read this article and learn how Intel has extended the reach of its > next-generation tools to help Windows* and Linux* C/C++ and Fortran > developers boost performance applications - including clusters. > http://p.sf.net/sfu/intel-dev2devmay > _______________________________________________ > mod-security-users mailing list > mod...@li... > https://lists.sourceforge.net/lists/listinfo/mod-security-users > ModSecurity Services from Trustwave's SpiderLabs: > https://www.trustwave.com/spiderLabs.php |