Hi
I'm software developer. My team developing applicaton to manage mod_security rules for various popular web-servers.
However, with LiteSpeed we have problem trying to whitelist certain rules for some domain.
We use following to whitelist (for example: rule ID - 340151, domain name - 'somehost.com'):
SecRule REQUEST_HEADERS:Host "@rx ^somehost\.com$"phase:1,id:123,nolog,pass,ctl:ruleRemoveByID=340151
It works like a charm for Apache, but for LiteSpeed rule just not whitelisted.
I browsed LiteSpeed forum and found this topic:
https://www.litespeedtech.com/support/forum/threads/mod_security-support.3791/
Is it still true? LiteSpeed still not supported 'ruleRemoveByID' yet?
How can we whitelist certain rule ID for some domain?
With best regards, Oleg
I'm software developer. My team developing applicaton to manage mod_security rules for various popular web-servers.
However, with LiteSpeed we have problem trying to whitelist certain rules for some domain.
We use following to whitelist (for example: rule ID - 340151, domain name - 'somehost.com'):
SecRule REQUEST_HEADERS:Host "@rx ^somehost\.com$"phase:1,id:123,nolog,pass,ctl:ruleRemoveByID=340151
It works like a charm for Apache, but for LiteSpeed rule just not whitelisted.
I browsed LiteSpeed forum and found this topic:
https://www.litespeedtech.com/support/forum/threads/mod_security-support.3791/
ruleRemoveByID is not supported yet, so, the only option with LiteSpeed is to comment out those unwanted rules.
Is it still true? LiteSpeed still not supported 'ruleRemoveByID' yet?
How can we whitelist certain rule ID for some domain?
With best regards, Oleg