如何将此 modsecurity 规则限制为一个文件？

Question

我有下面的规则，我只想限制 wp-login.php 文件。可能吗？

SecRule REQUEST_HEADERS:User-代理“@contains python-请求”"id:1000000,t:none,t:lowercase,deny,nolog,msg:'BAD BOT - Detected and Blocked. '"

Answer 1

使用chained rules:

SecRule REQUEST_URI "wp-admin.php" "chain,id:1000000,t:none,t:lowercase,deny,nolog,msg:'BAD BOT - Detected and Blocked. '"
    SecRule REQUEST_HEADERS:User-Agent "@contains python-requests" ",t:none,t:lowercase"

如何将此 modsecurity 规则限制为一个文件？

How to limit this modsecurity rule to one file?

mod-security

mod-security2