fix: CIDR & AuditLogPartsValue syntax

Open touchweb-vincent opened this issue 2 months ago • 2 comments

Hello,

Here is a proposal to manage this correctly :

SecRule REMOTE_ADDR "!@ipMatch 145.226.0.0/24,2001:4860:4801:3c::/64" "chain"

Oct 30 '25 05:10 touchweb-vincent

Hi @touchweb-vincent,

thanks for this contribution!

Could you add some tests which provide that the parser works as we expect with the mentioned tokens?

You can see existing test file for examples. Let us know if you need any help.

Oct 30 '25 09:10 airween

HI @airween

I don’t have the level to fully understand what’s expected, and I don’t have time to catch up right now.

I’ve written the rules to be tested - what remains is to complete the desired assertions.

Oct 30 '25 13:10 touchweb-vincent