To create an exception rule for a set of rule IDs, you can either separate them by spaces or use ranges (or have a separate line for each). Here is an example from the official documentation:
SecRuleRemoveByID 1 2 "9000-9010" Check out the official documentation: https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#secruleremovebyid Also, as you mentioned you were a newbie, you might be interested in the ModSecurity Handbook 2nd Edition for a more thorough guide for using ModSecurity - https://www.feistyduck.com/books/modsecurity-handbook/ A lot of the information on the internet related to ModSecurity is outdated and refers to older versions whereas the handbook covers the latest version (2.9.1) -- Osama Elnaggar On June 21, 2017 at 12:00:31 PM, Ramesh (thar...@gmail.com) wrote: Is there a guide on how to create an exception rule? The examples in the conf seems to be limited. I want to create an exception rule for a set of rule ids. Removebyid with comma separated rule ids is. It working. Any help is appreciated On Mon, Jun 12, 2017 at 9:21 AM Ramesh <thar...@gmail.com> wrote: > Thanks for all the suggestions. > > On Mon, Jun 12, 2017 at 8:44 AM Ed Greenberg <e...@greenberg.org> wrote: > >> On 06/09/2017 03:44 PM, Chaim Sanders wrote: >> >> The lists are index by Google and the like, but beyond that or having >> them in email format, I don't believe that mailman offers that >> functionality, sorry :( >> >> >> If you google for your search term and then add +site: >> http://lists.owasp.org/pipermail/owasp-modsecurity-core-rule-set/ it >> will restrict the search to the archive tree. >> >> For instance: >> >> false positive +site: >> http://lists.owasp.org/pipermail/owasp-modsecurity-core-rule-set/ >> >> >> Ed >> >> >> >> On Thu, Jun 8, 2017 at 2:32 PM, Ramesh <thar...@gmail.com> wrote: >> >>> Newbie on the block. i see that i can view the archive of the >>> mailing-list but is there a way to search? >>> >>> -- >>> Thanks, >>> RT >>> >>> _______________________________________________ >>> Owasp-modsecurity-core-rule-set mailing list >>> Owasp-modsecurity-core-rule-set@lists.owasp.org >>> https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set >>> >>> >> >> >> -- >> -- >> Chaim Sanders >> http://www.ChaimSanders.com >> >> >> _______________________________________________ >> Owasp-modsecurity-core-rule-set mailing >> listOwasp-modsecurity-core-rule-set@lists.owasp.orghttps://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set >> >> >> _______________________________________________ >> Owasp-modsecurity-core-rule-set mailing list >> Owasp-modsecurity-core-rule-set@lists.owasp.org >> https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set >> > -- > Thanks, > Ramesh > -- Thanks, Ramesh _______________________________________________ Owasp-modsecurity-core-rule-set mailing list Owasp-modsecurity-core-rule-set@lists.owasp.org https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set
_______________________________________________ Owasp-modsecurity-core-rule-set mailing list Owasp-modsecurity-core-rule-set@lists.owasp.org https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set
