ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
Describe the bug
This is a duplicated issue, the first one is more that 4 years old - see #2210.
Seems like
@rbl
operator does not support IPv6.There was the issue #3111, during the investigation I found this behavior.
Logs and dumps
This is what I found the log while I tried the operator:
libmodsecurity3:
mod-security2:
The expected format would be:
To Reproduce
Use the rule set given at this issue comment, and send a request:
Expected behavior
In the log it should be the expected format above, eg:
Server (please complete the following information):