[Modsecurity] New RBL feature in mod_security 2.0

[Richard McLean]

At 5:30 AM +1100 9/11/06, Richard McLean wrote:

>SecRule REQUEST_METHOD "^POST$" chain
>SecRule REMOTE_ADDR "@rbl xbl.spamhaus.org" log,deny
>
>Or is it more complicated than that? Thanks!


Looking further, seems the actions need to be in the first rule, so
I guess that becomes:

SecRule REQUEST_METHOD "^POST$" log,deny chain
SecRule REMOTE_ADDR "@rbl xbl.spamhaus.org"

Any thoughts or corrections to that would be greatly appreciated.


cheers,
Richard