天天看點

Modsecurity白名單

SecRule REMOTE_ADDR "@streq 192.168.1.1"  phase:1,t:none,nolog,allow

SecRule REMOTE_ADDR "@rx ^192\.168\.1\.(1|5|10)$"  phase:1,t:none,nolog,allow

SecRule REMOTE_ADDR "@streq 192.168.1.1"  phase:1,t:none,nolog,pass,ctl:ruleEngine=DetectionOnly

SecRule REMOTE_ADDR "@streq 192.168.1.1"  phase:1,t:none,nolog,pass,ctl:ruleEngine=DetectionOnly,chain

SecRule REQUEST_HEADERS:User-Agent "@contains SECRET_PASSWORD"