mod-security-users

[mod-security-users] Deleting Banned Ips

[Faruk A. <fa...@ya...>]

Guys,
As you know, the mod_security blocks the ip( some kind
of ban) how can we delete that ip from the blacklist.
I donot want to add an ip to whitelist - allow list-,
b/c then any further actions coming from that ip
cannot be stopped. I just want to delete that ip from
blacklist, as it never attacked my server before. How
can I do this? Thank you for your attention and time.

Faruk


PS:I am using, Suse Linux, Apache2 and the latest
stable version of mod_security


		
__________________________________ 
Do you Yahoo!? 
Read only the mail you want - Yahoo! Mail SpamGuard. 
http://promotions.yahoo.com/new_mail 

Re: [mod-security-users] Deleting Banned Ips

[Ivan R. <iv...@we...>]

Faruk Aysoy wrote:
> Guys,
> As you know, the mod_security blocks the ip( some kind
> of ban) how can we delete that ip from the blacklist.

   There's no blacklist. For every request that comes in
   mod_security makes a decision whether to block it or
   not - every time.


> I donot want to add an ip to whitelist - allow list-,
> b/c then any further actions coming from that ip
> cannot be stopped. I just want to delete that ip from
> blacklist, as it never attacked my server before. How
> can I do this? Thank you for your attention and time.

   If a reject is being rejected that means it triggered
   at least one rule in your configuration. Assuming your
   configuration is correct the request is an attack. If
   the request is not an attack then your configuration is
   incorrect :)

-- 
Ivan Ristic (http://www.modsecurity.org)