Search found 2 matches

by optize
Sun Nov 03, 2013 8:04 pm
Forum: Atomicorp Modsecurity Rules Support
Topic: Disabling a rule doesn't stop the notification?
Replies: 3
Views: 7097

Re: Disabling a rule doesn't stop the notification?

Thanks for the question. So first, thank you for using our rules. To disable a rule, make sure you use that directive after the rule has been loaded. If your SecRuleRemoveById 345402 comes before the rule is loaded it wont have any effect. Second, that rule is part of the experimental CSRF protecti...
by optize
Sun Nov 03, 2013 5:33 pm
Forum: Atomicorp Modsecurity Rules Support
Topic: Disabling a rule doesn't stop the notification?
Replies: 3
Views: 7097

Disabling a rule doesn't stop the notification?

Howdy - I have the following line in a custom file: SecRuleRemoveById 345402 However, I'm still getting that alert in my Apache error_logs: [Sun Nov 03 21:30:33 2013] [error] [client x.x.x.x] ModSecurity: Warning. Match of "eq 1" against "&ARGS:CSRF_TOKEN" required. [file &qu...