Re: [mod-security-users] ModSecurity 2.9.2 Rule Processing Order

[Gryzli B. <gry...@gm...>]

Thanks for your reply Reindl!

Could you tell me what do you mean by this:
 > the rule-ids are in different ranges depedning of context

Just to make it clear - I'm using my own rules (not the CRS).

Also I didn't find any section in the official documentation stating the 
rule execution order (for a same phase) is actually based no the order 
they are stored in config files, instead of the id.

On 12/12/18 3:07 PM, Reindl Harald wrote:
>
> Am 12.12.18 um 14:02 schrieb Gryzli Bugbear:
>> Hi to all,
>>
>> Recently I found something weird for me - rules executing in the same
>> phase , are executed not by their ID numbers, but rather based on
>> appereance in the configuration file.
>>
>> Is that a correct behavior for ModSecurity ?
> yes
>
> the rule-ids are in different ranges depedning of context and it would
> not make any sense execute them in the order of the id's at all
>
>
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/
-- 
-- Gryzli

https://gryzli.info