Excuse the interruption. I am just reviewing the rules to better understand their functions. Honestly, I am lost, but learning.
While browsing rule "REQUEST-910-IP-REPUTATION.CON", I discovered a hashtag '#' on line 92, effectively commenting out the beginning of the rule and causing it to be ineffective. Or am I mistaken? #SecRule TX:REAL_IP "@ipMatchFromFile ip_blacklist.data" \ "msg:'Client IP in Trustwave SpiderLabs IP Reputation Blacklist.',\ Arthur Johnston
_______________________________________________ Owasp-modsecurity-core-rule-set mailing list Owasp-modsecurity-core-rule-set@lists.owasp.org https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set
