Search found 2 matches
- Sun Nov 03, 2013 8:04 pm
- Forum: Atomicorp Modsecurity Rules Support
- Topic: Disabling a rule doesn't stop the notification?
- Replies: 3
- Views: 7097
Re: Disabling a rule doesn't stop the notification?
Thanks for the question. So first, thank you for using our rules. To disable a rule, make sure you use that directive after the rule has been loaded. If your SecRuleRemoveById 345402 comes before the rule is loaded it wont have any effect. Second, that rule is part of the experimental CSRF protecti...
- Sun Nov 03, 2013 5:33 pm
- Forum: Atomicorp Modsecurity Rules Support
- Topic: Disabling a rule doesn't stop the notification?
- Replies: 3
- Views: 7097
Disabling a rule doesn't stop the notification?
Howdy - I have the following line in a custom file: SecRuleRemoveById 345402 However, I'm still getting that alert in my Apache error_logs: [Sun Nov 03 21:30:33 2013] [error] [client x.x.x.x] ModSecurity: Warning. Match of "eq 1" against "&ARGS:CSRF_TOKEN" required. [file &qu...