Re: [mod-security-users] mod_security directives order

[Ivan R. <iv...@we...>]

Tkachenko Alexei wrote:
> Peace be with you,
> 
> Currently seems mod_security works in this way: if request match directive
> (SecFilter for example) than the corresponded action performed and no other
> action performed even if this request match another directive too.
> 
> Is there any possibility to bypass this?
> Maybe for particular directive or something like this?

   The request does not have to terminate on a rule match so, yes, it
   possible to do several different things for one request. E.g.

   # log only
   SecFilter KEYWORD1 log,pass

   # execute something
   SecFilter KEYWORD2 log,pass,exec:/some/binary

   # deny request
   SecFilter KEYWORD3 log,deny

-- 
Ivan Ristic (http://www.modsecurity.org)