Re: [mod-security-users] mod_security directives order
Brought to you by:
victorhora,
zimmerletw
|
From: Ivan R. <iv...@we...> - 2005-01-22 00:24:51
|
Tkachenko Alexei wrote: > Peace be with you, > > Currently seems mod_security works in this way: if request match directive > (SecFilter for example) than the corresponded action performed and no other > action performed even if this request match another directive too. > > Is there any possibility to bypass this? > Maybe for particular directive or something like this? The request does not have to terminate on a rule match so, yes, it possible to do several different things for one request. E.g. # log only SecFilter KEYWORD1 log,pass # execute something SecFilter KEYWORD2 log,pass,exec:/some/binary # deny request SecFilter KEYWORD3 log,deny -- Ivan Ristic (http://www.modsecurity.org) |