Re: [mod-security-users] Noauditlog

[Ivan R. <iv...@we...>]

li...@32... wrote:
> 
> I have noticed that if I use the 'noauditlog' parameter on a filter(rule),
> ModSec does not log any filter loaded after that one? Is this how it is
> supposed to work?

  Yes, that's how it's supposed to work: "noauditlog" applies to the
  request, not the rule. However, as you note, it is somewhat unexpected
  so it might be a good idea to add another action that would only
  skip logging to the audit log for the rule it is used in.

-- 
Ivan Ristic, Technical Director
Thinking Stone, http://www.thinkingstone.com
ModSecurity: Open source Web Application Firewall
Apache Security (O'Reilly): http://www.apachesecurity.net