Re: [mod-security-users] post to action form only allowed form ip address?
Brought to you by:
victorhora,
zimmerletw
From: Achim H. <web...@se...> - 2007-03-23 07:24:45
|
!! <LocationMatch "/your/action/page"> !! SecRule REMOTE_ADDR "!^1.2.3.4$" "phase:1,deny,msg:'Request from !! bad IP!'" !! SecRule REQUEST_METHOD "^!POST$" "phase:1,deny,msg:'Bad method!" !! </LocationMatch> a Location could not be matched in phase:1, hence this rule sounds useless Please correct me if I miss something. Sorry for being off-topic, somehow ... Achim |