From 36963dd9357c84091b5754407d556a0b8e55887d Mon Sep 17 00:00:00 2001 From: b1v1r Date: Fri, 17 Apr 2009 16:48:36 +0000 Subject: [PATCH] Fix example for drop action in docs. --- doc/modsecurity2-apache-reference.xml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/doc/modsecurity2-apache-reference.xml b/doc/modsecurity2-apache-reference.xml index 4bd61ccf..b2a0099d 100644 --- a/doc/modsecurity2-apache-reference.xml +++ b/doc/modsecurity2-apache-reference.xml @@ -6,7 +6,7 @@ Manual - Version 2.5.9 (March 5, 2009) + Version 2.5.10-dev1 (April 17, 2009) 2004-2009 @@ -4548,11 +4548,11 @@ SecRule REQUEST_CONTENT_TYPE ^text/xml nolog,pass,ctl:requestBodyProce threshold of more than 25 attempts in 2 minutes, it will DROP subsequent connections. - SecAction initcol:ip=%{REMOTE_ADDR},nolog + SecAction phase:1,initcol:ip=%{REMOTE_ADDR},nolog SecRule ARGS:login "!^$" \ nolog,phase:1,setvar:ip.auth_attempt=+1,deprecatevar:ip.auth_attempt=20/120 SecRule IP:AUTH_ATTEMPT "@gt 25" \ - log,drop,phase:1,msg:'Possible Brute Force Attack" + "log,drop,phase:1,msg:'Possible Brute Force Attack'" Note