[mod-security-users] 2 newbie questions ...

[Thomas F. <tho...@gm...>]

Hi list,

1.) reduced access_log

I wonder if there is chance to configure mod_security, that filtered 
requests does not show up in the access_log. I would like to see 
something like

access_log ... the good ones
mod_security.log ... the bad ones
error_log ... good one, but didn't get it right.

but I only managed get to run

access_log ... everything (good + filtered url's)
mod_security.log ... the bad ones (all filtered url's) or nolog
error_log. ... good one, but didn't get it right.

any ideas ?

2.) block everything but ...

I would like to issue a positive list like block everything but. It 
looks like this ...

    SecFilter .jsp      "nolog,allow"
    SecFilter /robots.txt "nolog,allow"
    SecFilter !.do


is this correct or is there a nicer version doing this ...

any help is appreciated ... tom