1[ 2 { 3 "enabled":1, 4 "version_min":300000, 5 "title":"SecRuleEngine DetectionOnly with disruptive SecDefaultAction", 6 "client":{ 7 "ip":"200.249.12.31", 8 "port":123 9 }, 10 "server":{ 11 "ip":"200.249.12.31", 12 "port":80 13 }, 14 "request":{ 15 "headers":{ 16 "Host": "localhost" 17 }, 18 "uri":"?a=a", 19 "method":"GET" 20 }, 21 "response":{ 22 "headers":{ 23 "Date":"Mon, 13 Jul 2015 20:02:41 GMT", 24 "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", 25 "Content-Type":"text/html" 26 }, 27 "body":[ 28 "no need." 29 ] 30 }, 31 "expected":{ 32 "http_code":200 33 }, 34 "rules":[ 35 "SecRuleEngine DetectionOnly", 36 "SecDefaultAction \"phase:1,deny,status:403\"", 37 "SecRule ARGS \"@rx a\" \"id:1,phase:1,block" 38 ] 39 } 40] 41