Re: [mod-security-users] initcol:global=global : what does it mean?

[Christian F. <chr...@ne...>]

Hi Mikaël,

On Sun, Oct 04, 2020 at 06:22:16PM +0200, Mikaël Pirio wrote:
> I see this in OWASP rule but i don't understand it: initcol:global=global
> When I Want to init a collection, I use initcol:ip=%{...}. Why not use %{
> ... } here?

The IP collection and the global collection are two different kinds of
persistent ModSec storage collections (also see USER, SESSION and RESOURCE).
And each of these collections has a specific method to be initalized.
This is the way you initialize the global collection.

The next question is, why CRS would initalize the global collection in the
first place. We're not using actively after all. Need to check with the
team.

Cheers,

Christian


> 
> Thanks,


> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/