<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=windows-1255"
http-equiv="Content-Type">
</head>
<body dir="ltr" bgcolor="#ffffff" text="#000000">
<p style="margin-bottom: 0cm; margin-top: 0pt;"><font face="Arial">hi,</font></p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><font face="Arial">i
have a rule in file called modsecurity-php.conf which says:</font></p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><font face="Arial">
SecFilterSelective ARGS_VALUES "^<a class="moz-txt-link-freetext" href="http:/">http:/</a>" deny,log</font></p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><font face="Arial"><br>
</font></p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><font face="Arial">and
i want to exclude ONLY this rule for a specific cgi script,</font></p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><font face="Arial">so i
put this code in my exclusion file (and i included it in my httpd.conf)
:<br>
</font></p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><font face="Arial">
<LocationMatch /path_to_cgi/filename.cgi></font></p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><font face="Arial">
SecFilterSelective ARGS_VALUES "^<a class="moz-txt-link-freetext" href="http:/">http:/</a>" pass,nolog</font></p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><font face="Arial">
</LocationMatch></font></p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;">but when i go to that
script i'm still denied if i have <a class="moz-txt-link-freetext" href="http:/">http:/</a> </p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;">i'v tried a few more
versions of the excluding rule but none helped (location instead of
locationmatch, secfilter instead of secfilterselective)</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;">the only time i did get
an exclusion on that location was when i had</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;">
SecFilterInheritance off</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;">but then, none of the
other rules worked on this script.</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;">i want to understand is
there a way to exclude one rule only for that script, but keep other
rules working.</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;">thanks.</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
Gonen.</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><font face="Arial"></font></p>
</body>
</html>