On Mon, Dec 22, 2014 at 11:46 AM, Ilyass Kaouam <ilyassi...@gmail.com>
wrote:

> Hi
>
> We have a sub-site www.abcdef.com/Bilbo
>
> We want disable WAF for   this subdomain /BilBO   only
>

Hi Ilyass,

One way to do this is via a rule like:

SecRule REQUEST_URI "^/bilbo"
id:1,t:none,t:lowercase,nolog,phase:1,allow,ctl:ruleEngine=Off,ctl:auditEngine=Off"

Note you mention both /Bilbo and /BilBo above so I'm assuming the server is
case-insensitive and used bilbo in the rule and the lowercase
transformation.

- Josh


>
> (this website is made by java)
>
> How I can do that?
>
>  thank you
>
> --
> *Ilyass kaouam*
> *Systems administrator*
> * at Inforisk Group Finaccess *
> *European Masters in Information Technology*
> *Portable : (212) *
> *6 34 57 14 36**http://www.inforisk.ma <http://www.inforisk.ma>*
>
> _______________________________________________
> Owasp-modsecurity-core-rule-set mailing list
> Owasp-modsecurity-core-rule-set@lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set
>
>
_______________________________________________
Owasp-modsecurity-core-rule-set mailing list
Owasp-modsecurity-core-rule-set@lists.owasp.org
https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set

Reply via email to