protect 3rd party API block everything only allow specific calls to the api with specific parameters

Hi there,

So it happens we have a 3rd party API provider that we need to expose, the
API is quite extensive, we would like to basically block every single call
to the API except for a very specific call with some specific parameters,
for example

block something like this
curl -s -d "<config classId='c' cookie='xx'  />"
and allow only something like this
curl -s -d "<setup classId='x' cookie='xx'  />"

we have the full API reference so we could have one rule per api call that
we want to block, what would be the best way to achieve this ?  on modsec 2
?

Thanks in advance

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/