File download scanning with modsecurity

Question

I want to scan the file downloads with mod-security. Is it possible to do this? I could not find any way of doing it. File upload scanning is feasible but how to do scanning of downloads?

score 1 · Answer 1 · answered Feb 28 '16 at 19:20

1

Yes it's possible to do this.

Look at SecResponseBodyAccess and SecResponseMimeType. Note however that only text files are really useful to check. PDFs and other documents which contain binary data lead to many false positives.

answered Feb 28 '16 at 19:20

Barry Pollard

40,655
7
76
92

Thanks, but the same issue should be for uploads also? – alice Feb 29 '16 at 06:34

File download scanning with modsecurity

1 Answers1