[prev in list] [next in list] [prev in thread] [next in thread] 

List:       mod-security-users
Subject:    [mod-security-users] About SecDefaultAction
From:       Ehsan Mahdavi <ehsan.mahdavi () gmail ! com>
Date:       2014-08-22 13:24:21
Message-ID: CAC7V=mzPi9buOi_KKN-wb4Z8e3yzKKXUg=PZvHNCUhDLErUwQQ () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Hi,

I have a rule like this: SecRule "variable" "condition" "phase:1,block,...

Following the CRS10 example(2.2.9) I have two consecutive default actions
like this:

SecDefaultAction "phase:1,deny,log"
SecDefaultAction "phase:2,deny,log"

I need to know:
1. Are both SecDefaultActions are working or just the latter one?
2. If the answer of above question is NO and If the rule matches, will
modsecurity deny the transaction? (I ask because the rule performs in
phase:1 and the latter SecDefaultAction is defined over the 2nd phase).

-- 
                    regards
                 Ehsan.Mahdavi

[Attachment #5 (text/html)]

<div dir="ltr"><br clear="all"><div>Hi,</div><div><br></div><div>I have a rule like \
this:  <span style="color:rgb(0,0,0);font-family:&#39;courier \
new&#39;,courier;white-space:pre-line;background-color:rgb(238,238,238)">SecRule \
&quot;variable&quot; &quot;condition&quot; &quot;phase:1,block,...</span></div> \
<div><br></div><div>Following the CRS10 example(2.2.9) I have two consecutive default \
actions like this:</div><div><div><br></div><div>SecDefaultAction \
&quot;phase:1,deny,log&quot;</div><div>SecDefaultAction \
&quot;phase:2,deny,log&quot;</div> </div><div><br></div><div>I need to \
know:</div><div>1. Are both SecDefaultActions are working or just the latter \
one?</div><div>2. If the answer of above question is NO and If the rule matches, will \
modsecurity deny the transaction? (I ask because the rule performs in phase:1 and the \
latter SecDefaultAction is defined over the 2nd phase).</div> <div><br></div>-- \
<br><div dir="ltr"><div style="color:rgb(136,136,136)">                              \
regards<br>                          Ehsan.Mahdavi</div><div \
style="color:rgb(136,136,136)"><br></div></div> </div>



------------------------------------------------------------------------------
Slashdot TV.  
Video for Nerds.  Stuff that matters.
http://tv.slashdot.org/

_______________________________________________
mod-security-users mailing list
mod-security-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/


[prev in list] [next in list] [prev in thread] [next in thread]