Topic: Mod_Security and CDIR addresses

[coronad0]

We do quite a bit of IP blocking in mod_sec using:
SecRULE REMOTE_ADDR "@ipMatchFromFile blah.txt"

And I've run into a bug where any CIDR address that ends in /32, meaning just the single IP, or any address that ends with a single digit, like /8, throws an error when performing a httpd -t for validation.

I've found a work around in our ip match files for /32 addresses by just deleting the /32, but for the single digits, as in the case of /8, I have no work around and that /8 represents some 8.3 million addresses. A pretty huge security risk for a block I need to add.

Anyone else run into this or find a work around?

[admin]

Better to ask it also at https://lists.sourceforge.net/lists/listinfo/mod-security-users