Re: [mod-security-users] Rule for mod security 3 in nginx, blocking a files containing a strings
Brought to you by:
victorhora,
zimmerletw
From: Christian F. <chr...@ne...> - 2017-06-16 09:36:24
|
Hope so too... :) On Fri, Jun 16, 2017 at 12:20:08PM +0300, Georgi Georgiev wrote: > Tried with SecDisableBackendCompression, but it didn’t work. I had the same problem with varnish before an year, but I had totally forgot about it :) I noticed in the logs that when do curl of the url that should be blocked and one hit from browser was a different encoding related things logged. I hope that this will help to other people. > > > On Jun 16, 2017, at 12:13 PM, Christian Folini <chr...@ne...> wrote: > > > > SecDisableBackendCompression l > > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > _______________________________________________ > mod-security-users mailing list > mod...@li... > https://lists.sourceforge.net/lists/listinfo/mod-security-users > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > http://www.modsecurity.org/projects/commercial/rules/ > http://www.modsecurity.org/projects/commercial/support/ -- https://www.feistyduck.com/training/modsecurity-training-course mailto:chr...@ne... twitter: @ChrFolini |