ModSecurity SecRule REMOTE_ADDR NOT WORKING?

I'm trying to nolog for a particular IP 10.68.***.96 and 127.0.0.1 address but it seem not working...

I already tried the following configurations (I know that some of them are depreciated but it's for the test):

SecRule REMOTE_ADDR "@ipMatch 10.68.***.96,127.0.0.1" "id:1,phase:1,nolog,deny"
SecRule REMOTE_ADDR "@ipMatch 10.68.***.96,127.0.0.1" "phase:1,nolog,deny,id:2"

SecRule REMOTE_ADDR "@ipMatch 10.68.***.96" phase:1,t:none,nolog,deny,id:3
SecRule REMOTE_ADDR "^10.68.***.96" "phase:1,nolog,deny,id:'4'"

SecRule REMOTE_ADDR "@ipMatch 127.0.0.1" phase:1,id:'5',nolog,deny,ctl:ruleEngine=Off,ctl:auditEngine=Off
SecRule REMOTE_ADDR "@ipMatch 10.68.***.96" phase:1,id:'6',nolog,deny,ctl:ruleEngine=Off,ctl:auditEngine=Off

Your help is welcome, and I searched a lot before asking you here.

Thanks in advance.

0
задан 22 November 2016 в 14:37
1 ответ

Попробуйте это

SecRule REMOTE_ADDR "@ipMatch 192.168.1.100,192.168.1.50,10.10.50.0/24" "id:162"
-1
ответ дан 5 December 2019 в 18:45

Теги

Похожие вопросы