Hi,
you can set paranoia level in crs-setup.conf, rule ID 900000. Default
is paranoia level 1, so only PL1 rules are executed.
azurit
Citát Brent Clark <bre...@gm...>:
> Good day Guys
>
> We want to retain PL1 as our overall paranoia level and avoid
> enabling unrelated PL2 rules.
>
> Is it at all possible run / include rule (i.e id:932239) from
> owasp-modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf
>
> Hope to include the id 932239 in crs-setup.conf,
>
> I'd appreciate any advice or examples from anyone who has
> implemented something similar.
>
> Thanks in advance for your help.
>
> Regards
> Brent
>
>
>
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/
|