Closed
Description
Bug #706 is back, but in a much less harmful way.
The following rule does not work in 2.9.0
SecRule REMOTE_ADDR "@ipMatch 127.0.0.1/32" "phase:1,nolog,pass,msg:’Localhost connection’,id:1"
resulting in the following error on startup:
Error creating rule: Could not add entry "127.0.0.1/32" from: 127.0.0.1/32.
SecRule REMOTE_ADDR "@ipMatch 127.0.0.1" "phase:1,nolog,pass,msg:’Localhost connection’,id:1"
works though.
Unfortunately, there does not seem to be a test in
https://github.com/SpiderLabs/ModSecurity/blob/master/tests/op/ipMatch.t
to catch this misbehavior.