mod_security - rule for the whole webmail.*

[albans]

Hi,

I was wondering if it was possible to make an exclude rule for mod_security for the whole webmail on PSA...

What I mean is defining a rule that'll exclude some Filters when matching something like "*webmail.*".

Is it possible?

In an other way, would it be possible to use an .htaccess with
SecFilterEngine Off
in it placed in the root path of Horde? I couldn't find the path corresponding to webmail.*...

Thanks for your advice!

 

[albans]

I think I maybe found a solution here:
http://atomicrocketturtle.com/forum/viewtopic.php?t=1450

Have to try to put something like that:
<Directory /usr/share/psa-horde>
SecFilterRemove 300018
SecFilterRemove 300040
</Directory>

 

[albans]

I finally ended up with only this rule concerning Horde/IMP:

<Directory /usr/share/psa-horde>
SecFilterRemove 300013
SecFilterRemove 300015
SecFilterRemove 300016
SecFilterRemove 300018
SecFilterRemove 300040
</Directory>

I put it in exclude.conf (mod_security config files). It works well.

For more informations, see this thread on Atomic.