[mod-security-users] Wget filter

[Tkachenko A. <al...@tk...>]

Peace be with you,

I use the following filters:
********
    SecFilter "wget+"
    SecFilter "wget%"
********

I have 2 questions, please help me with them:
1) My logs always contain "wget+" but no "wget%" even if the following
request was blocked "cd%20.temp22;wget%20http://".
Why so? Why my log does not contain "wget%" at all?

2) Now I have blocked the "GET /rus/sysswgetst.htm HTTP/1.1" requests with
"Pattern match "wget+" at THE_REQUEST" message
Why so? I don't want to block them.


Thank you!



Alexey.