I have a Modsecurity rule which blocks all requests where the browser Referer Header is different from this: sub1.example.com
.
So basically the rule only allows requests when the Header Referer is sub1.example.com
:
SecRule REQUEST_HEADERS:REFERER "!@rx (?i)^https?://sub1.example.com/" /
"id:'7001024',phase:1,log,deny,status:404,msg:'Blocking Wrong or Empty Referer'"
My question is: How can I modify this rule to also allow requests with a second referer like sub2.example.com