mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-08-14 13:56:01 +03:00
Changing drop action example, setting number of attempts.
parent
6a4ea0d97b
commit
507b7bacf9
@ -2989,7 +2989,7 @@ Counter values are always positive, meaning that the value will never go below z
|
||||
<pre>
|
||||
SecAction phase:1,id:109,initcol:ip=%{REMOTE_ADDR},nolog
|
||||
SecRule ARGS:login "!^$" "nolog,phase:1,id:110,setvar:ip.auth_attempt=+1,deprecatevar:ip.auth_attempt=25/120"
|
||||
SecRule IP:AUTH_ATTEMPT "@gt 0" "log,drop,phase:1,id:111,msg:'Possible Brute Force Attack'"
|
||||
SecRule IP:AUTH_ATTEMPT "@gt 25" "log,drop,phase:1,id:111,msg:'Possible Brute Force Attack'"
|
||||
</pre>
|
||||
|
||||
; Note : This action is currently not available on Windows based builds.
|
||||
|
Loading…
x
Reference in New Issue
Block a user