Info update rules CRS OWASP

Marcello Lorenzi <[email protected]>
Newsgroups gmane.comp.apache.mod-security.user
Message-ID <CACT02+7ZZztk+Whsxnh2CLJaN5tCBC4ApDVB83EBx6NDgdJA=w@mail.gmail.com>
Hi All,
we have configured a Nginx webserver with mod_security 2.9.2 and OWASP CRS
3.0.2 and during our tests we noticed that some rules blocked some requests
from external clients. We would update the rule with ID 920420 adding the
POST method into the SecRule section without rewriting the entire rule.

Is it possible to override only a little part of a rule in a clean way?

Thanks,
Marcello

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.