mod-security-users

[mod-security-users] Rule

[G. <jg...@jo...>]

It's me again....

How can i block this kind of request : GET 
http://www.bluegrassass.com/BGAmembers/index.html

It seems that some people try to use the web server as a proxy.

Thanks for all

Re: [mod-security-users] Rule

[Ivan R. <iv...@we...>]

> How can i block this kind of request : GET 
> http://www.bluegrassass.com/BGAmembers/index.html

   You can block it with:

   SecFilterSelective THE_REQUEST "http://"

   but that will probably block all proxy requests. If you want
   to that it would probably be easier to turn the proxy off:

   ProxyRequests Off

   If you need the proxy but want to prevent some people from
   using it have a look here:

   http://httpd.apache.org/docs/mod/mod_proxy.html
   (assuming you're using Apache 1.x)

   The code snippet is:

   <Directory proxy:*>
       Order Deny,Allow
       Deny from all
       Allow from yournetwork.example.com
   </Directory>

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]