jvdmr / mod_evasive

Apache mod_evasive module
GNU General Public License v2.0
15 stars 8 forks source link

Not working doswhitelisturi with query params in linux #22

Closed abhishekjadhav4 closed 3 years ago

abhishekjadhav4 commented 3 years ago

I am looking to whitelist following URL http://localhost/jasperserver/flow.html?_flowId=searchFlow

Please share the value of DOSwhitelistURI

jvdmr commented 3 years ago

That would be DOSWhitelistUri /jasperserver/flow.html

Edit: query params are not part of the URI, which is everything between the domain name (localhost in this case) and the ?.

abhishekjadhav4 commented 3 years ago

Is there any way to blacklist a specific URL by mentioning in whitelistURI? Any regex or something else we can use? I want to blacklist only "/j_spring_security_check" and apart from this all URI should be accepted.