mod_security : don't block ALL entries
Posted: 06 Jan 2007, 17:05
Hi Chirpy 
I changed your regex.pm a little to not block all mod_security related entries as some IPs were getting blocked for "Access Allowed", for example
My rule is now :
But I guess it will be overwritten with the next csf update... maybe you could consider to change the regex.pm by default ?
Thank you once more for this fantastic tool !
I changed your regex.pm a little to not block all mod_security related entries as some IPs were getting blocked for "Access Allowed", for example
My rule is now :
Code: Select all
if (($config{LF_MODSEC}) and ($line =~ /\[client (.*)\] mod_security: Access denied/)) {
return ("mod_security triggered by",$1,"mod_security");Thank you once more for this fantastic tool !