In my virtualhost I have this modsecurity setup
SecRuleEngine On
SecRule REQUEST_METHOD "@streq CONNECT" "id:1,nolog,drop,phase:1"
Despite the 'nolog' instruction I got in apache access log the CONNECT request with 403 forbidden error, why?
I need to drop (not simply deny) it and do not log
where am I wrong?