[Modsecurity] New RBL feature in mod_security 2.0

[Richard McLean]

Hi all,


I'd like to start using the RBL features in mod_security 2.0, but I can't
really find much documentation on it. What I'd like to do is check all
POST requests through the xbl.spamhaus.org RBL. Would the
following rule do that?

SecRule REQUEST_METHOD "^POST$" chain
SecRule REMOTE_ADDR "@rbl xbl.spamhaus.org" log,deny

Or is it more complicated than that? Thanks!


cheers,
Richard