How to white list an IP address in Mod Security

Often you will have a ruleset in Mod_Security that you want to override for a specific IP address or within a certain path in a website or an application.

To do this you need to locate or create your Mod_Security white list file, then add this line:

SecRule REMOTE_ADDR "^192.168.1.1$" phase:1,log,allow,ctl:ruleEngine=Off,id:999999

…where

id:999999

is the ID of the rule you want to override.

You can also disable mod_security for a domain by adding this line to your mod_security config file:(e.g. modsec2.conf)

<IfModule> mod_security2.c
  SecRuleEngine Off
</IfModule>