Hey
Concerning
https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#Processing_Phases
"The order of rules in the configuration file is important only within
the rules of each phase."
Can anyone elaborate on that?
If you specify say
1) SecRule some_variable some_operator "some_action,phase:1,id:4"
2) SecRule some_variable some_operator "some_action,phase:2,id:5"
3) SecRule some_variable some_operator "some_action,phase:1,id:5"
4) SecRule some_variable some_operator "some_action,phase:2,id:4"
The order of execution is pretty clear, is it not? 1 -> 3 -> 4 -> 2
How would the order of statements in the configuration file play a role?
Thanks.
Marki
|