Ignore specific rules for a group of IP addresses

Question

Is it possible to ignore specific rules (OWASP CRS for ModSecurity on NGINX) for a specific group of whitelisted IPs?

Thanks

Answer 1

Yes. You can add IP Based whitelisting for specific rules in ModSecurity. Please refer to the doc from the link below:

https://www.modsecurity.org/CRS/Documentation/exceptions.html

and

https://malware.expert/tutorial/how-to-whitelist-ip-address-with-modsecurity/