Request Filtering
Table of Contents
Request Filter | Enable Request Filtering Log Level Default Action Scan Request Body Disable .htaccess Override
Request Filtering Rule Set | Name Rule Set Action Enabled Rules Definition
Enable Request Filtering |
Description: Specifies whether to enable request content deep inspection. This feature is equvialent to Apache's mod_security, which can be used to detect and block requests with ill intention by matching known signatures.
Syntax: Select from radio box
Log Level |
Description: Specifies the log level of the censoring engine debug output. Value ranges from 0 - 9, 0 will disable logging and 9 will produce the most detailed log. The log level of the server and the virtual host's error log must be set to at least INFO for this option to take effect. This is useful when testing your censoring rules.
Syntax: Integer number
See Also: Server Log Level, Virtual Host Log Level
Default Action |
Description: Specifies the default actions should be taken when a censoring rule was matched. The action string is compatible with the syntax of Apache mod_security, please refer to mod_security manual for more detail. Default value is "deny,log,satatus:403", which means to deny access with status code 403 and log the incident in the error log.
Syntax: string
Scan Request Body |
Description: Specifies whether to check the body part of a HTTP POST request. Default is No.
Syntax: Select from radio box
Disable .htaccess Override |
Description: Specifies whether to disable .htaccess override. This is a global setting, only available at server level. Default is No.
Syntax: Select from radio box
Name |
Description: Give a group of censorship rules a name, for display only.
Syntax: string
Rule Set Action |
Description: Specifies the actions should be taken when a censoring rule in current ruleset was matched. If not set, Default Action will be used. The action string uses the same syntax as directive SecDefaultAction in Apache mod_security, please refer to mod_security manual for more detail.
Syntax: string
Enabled |
Description: Specifies whether to enable this rule set. With this option, a rule set can be quickly turned on and off without adding or removing the rule set. Default is yes.
Syntax: Select from radio box
Rules Definition |
Description: Specifies a list of censorship rules. Syntax of censoring rule follow Apache's mod_security directives. "SecFilter" or "SecFilterSelective" can be used here. You can copy and paste Security Rules in Apache configuration file. If you are using apache config file, you have to set up rules in httpd.conf and rules defined here has no effect. For more details about rule syntax, please refer to Mod Security document.
Syntax: string
Copyright © 2003-2011. Lite Speed Technologies Inc. All rights reserved.