You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

38 lines
1.4 KiB

  1. commit dfc3718f0a302ea3deb5f1a325d35fce0e4cfa48
  2. Author: Yann Cézard <ycezard@viareport.com>
  3. Date: Thu Apr 25 14:48:38 2019 +0200
  4. DOC: contrib/modsecurity: Typos and fix the reject example
  5. Thanks to https://www.mail-archive.com/haproxy@formilux.org/msg30056.html
  6. This patch may be backported to 1.9 and 1.8.
  7. (cherry picked from commit 494ddbff478d880e48de490f2689607addac70bc)
  8. Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
  9. (cherry picked from commit 850896603086877641272d6e4075e66bd91f2e50)
  10. Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
  11. diff --git a/contrib/modsecurity/README b/contrib/modsecurity/README
  12. index e6cb305e..8031389d 100644
  13. --- a/contrib/modsecurity/README
  14. +++ b/contrib/modsecurity/README
  15. @@ -88,15 +88,15 @@ HAProxy configuration. For example:
  16. balance roundrobin
  17. timeout connect 5s
  18. timeout server 3m
  19. - server iprep1 127.0.0.1:12345
  20. + server modsec1 127.0.0.1:12345
  21. The modsecurity action is returned in a variable called txn.modsec.code. It
  22. contains the HTTP returned code. If the variable contains 0, the request is
  23. clean.
  24. - tcp-request content reject if { var(txn.modsec.code) -m int gt 0 }
  25. + http-request deny if { var(txn.modsec.code) -m int gt 0 }
  26. -With this rule, all the request not clean are reected.
  27. +With this rule, all the request not clean are rejected.
  28. Known bugs, limitations and TODO list