nginxmod-securitymod-security2

Ignore specific rules for a group of IP addresses

Is it possible to ignore specific rules (OWASP CRS for ModSecurity on NGINX) for a specific group of whitelisted IPs?

Thanks

Solution

  • Yes. You can add IP Based whitelisting for specific rules in ModSecurity. Please refer to the doc from the link below:

    https://www.modsecurity.org/CRS/Documentation/exceptions.html

    and

    https://malware.expert/tutorial/how-to-whitelist-ip-address-with-modsecurity/