« Server Security Configuration Cache Settings »

Request Filtering

Table of Contents

Request Filter Enable Request Filtering   Log Level   Default Action   Scan Request Body    Request Filtering Rule Set Name   Rule Set Action   Enabled   Rules Definition

Enable Request Filtering Description: Specifies whether to enable request content deep inspection. This feature is equvialent to Apache's mod_security, which can be used to detect and block requests with ill intention by matching known signatures. Syntax: Select from radio box

Log Level Description: Specifies the log level of the censoring engine debug output. Value ranges from 0 - 9, 0 will disable logging and 9 will produce the most detailed log. The log level of the server and the virtual host's error log must be set to at least INFO for this option to take effect. This is useful when testing your censoring rules. Syntax: Integer number See Also: Server Log Level, Virtual Host Log Level

Default Action Description: Specifies the default actions should be taken when a censoring rule was matched. The action string is compatible with the syntax of Apache mod_security, please refer to mod_security manual for more detail. Default value is "deny,log,satatus:403", which means to deny access with status code 403 and log the incident in the error log. Syntax: string

Scan Request Body Description: Specifies whether to check the body part of a HTTP POST request. Default is no. Syntax: Select from radio box

Name Description: Give a group of censorship rules a name, for display only. Syntax: string

Rule Set Action Description: Specifies the actions should be taken when a censoring rule in current ruleset was matched. If not set, Default Action will be used. The action string uses the same syntax as directive SecDefaultAction in Apache mod_security, please refer to mod_security manual for more detail. Syntax: string

Enabled Description: Specifies whether to enable this rule set. With this option, a rule set can be quickly turned on and off without adding or removing the rule set. Default is yes. Syntax: Select from radio box

Rules Definition Description: Specifies a list of censorship rules. Syntax of censoring rule follow Apache's mod_security directives. "SecFilter" or "SecFilterSelective" can be used here. You can copy and paste Security Rules in Apache configuration file. For more details about rule syntax, please refer to Mod Security document. Syntax: string

« Server Security Configuration Cache Settings »

Copyright © 2003-2007. Lite Speed Technologies Inc. All rights reserved.