Reference Manual

The rule language and configuration reference for ModSecurity v2 and libModSecurity v3.

Each directive, variable, transformation, action and operator is documented once. The metadata table under each entry shows the ModSecurity v2 version it first appeared in, and whether libModSecurity v3 supports it.

Badge legend:

BadgeMeaning
since 2.7.0available from that release on
supportedavailable, first release not recorded
not implemented yetaccepted by the parser or planned, but not functional in libModSecurity v3
not supportednot available in that engine
unknownnot verified yet