Reputation
1,527
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
8 22
Newest
 Caucus
Impact
~189k people reached

1d
awarded  Caucus
Jul
23
awarded  Notable Question
Jun
18
revised ModSecurity rule to not scan URI
added additional link resource for rule chaining
Jun
18
comment ModSecurity rule to not scan URI
@Arlion, disabling inspection of URI is just as bad as disabling the rule in some cases, the URI can often be matched by signatures for known exploit locations; you can look at rule modification if you really must ignore the URI but that is not something I can help with.
Jun
18
comment ModSecurity rule to not scan URI
Let us continue this discussion in chat.
Jun
18
comment ModSecurity rule to not scan URI
@Arlion hence the comment about using LocationMatch directive to ensure rules are only disabled for known falsepositives.
Jun
18
comment ModSecurity rule to not scan URI
The shortest method is to correlate your false positives and selectively disable the associated rules; it may be possible to negate URI inspection through source / rule modification however I could not give an direction here at this time.
Jun
18
answered ModSecurity rule to not scan URI
Jun
18
comment ModSecurity rule to not scan URI
ModSecurity does not perform packet inspection, it is performing HTTP request inspection at the various stages of the HTTP transaction; I assume you wish to only negate false positives due to the URI?
Jun
18
comment ModSecurity rule to not scan URI
I think the issue is more on the question itself; you want to exclude all URI's from ModSecurity inspection; begs the question of why you want ModSecurity at all in this case as it will become completely redundant if instructed to not inspect any URI at all.
Jun
6
awarded  Nice Answer
Apr
7
awarded  Popular Question
Feb
4
awarded  Yearling
Sep
30
awarded  Explainer
Sep
11
awarded  Notable Question
Jul
2
awarded  Curious
Feb
4
awarded  Yearling
Sep
17
awarded  Popular Question
Sep
5
awarded  Self-Learner
May
10
awarded  Popular Question