mod-security-users

[mod-security-users] Possible to exempt mod_security from certain trusted IPs?

[<je...@TI...>]

We've just installed mod_security here and it looks very nice :)

The server is running Vbulletin and  it seems that any good set of most 
mod_security rules will bust the template manager system for Vbulletin.

So I'm curious if anyone knows if it is possible to disable the 
mod_security rules for a couple IP's (mine) deemed to be trusted.

Thanks

Re: [mod-security-users] Possible to exempt mod_security from certain trusted IPs?

[Ivan R. <iv...@we...>]

jeremy@TICKWATCH wrote:
> We've just installed mod_security here and it looks very nice :)
> 
> The server is running Vbulletin and  it seems that any good set of most
> mod_security rules will bust the template manager system for Vbulletin.
> 
> So I'm curious if anyone knows if it is possible to disable the
> mod_security rules for a couple IP's (mine) deemed to be trusted.

  Sure it is, using something like (at the top):

  SecFilterSelective REMOTE_ADDR ^YOUR_IP_ADDRESS$ nolog,allow

  Look it up in the manual.

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org