Re: [mod-security-users] exempting certain virtual hosts from filters? (mt-comments.cgi filter)

[Ivan R. <iv...@we...>]

Fred Stutzman wrote:
> A ruleset like this is well-suited for blocking movable type:
> 
> # Block Movable Type Comments
> SecFilterSelective REQUEST_URI "mt-comments.cgi" chain

   While there the chances of suffering a false positive in
   this case are small, you might want to look at using a
   tighter filter for other filters.

   SecFilterSelective SCRIPT_FILENAME "mt-comments.cgi$" chain

-- 
Ivan Ristic (http://www.modsecurity.org)