Skip to content
This repository was archived by the owner on May 14, 2020. It is now read-only.

Commit 401bd6e

Browse files
committed
Change order to check ip first in both rules
1 parent 4907c6e commit 401bd6e

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

rules/REQUEST-905-COMMON-EXCEPTIONS.conf

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ SecRule REQUEST_LINE "@streq GET /" \
3232
#
3333
# Exception for Apache internal dummy connection
3434
#
35-
SecRule REQUEST_HEADERS:User-Agent "@endsWith (internal dummy connection)" \
35+
SecRule REMOTE_ADDR "@ipMatch 127.0.0.1,::1" \
3636
"id:905110,\
3737
phase:1,\
3838
pass,\
@@ -43,7 +43,7 @@ SecRule REQUEST_HEADERS:User-Agent "@endsWith (internal dummy connection)" \
4343
tag:'platform-apache',\
4444
tag:'attack-generic',\
4545
chain"
46-
SecRule REMOTE_ADDR "@ipMatch 127.0.0.1,::1" \
46+
SecRule REQUEST_HEADERS:User-Agent "@endsWith (internal dummy connection)" \
4747
"t:none,\
4848
chain"
4949
SecRule REQUEST_LINE "@rx ^(?:GET /|OPTIONS \*) HTTP/[12]\.[01]$" \

0 commit comments

Comments
 (0)