Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: mod_security anti brute force script help |
|
| Author |
|
stylesoftware2
Joined: 23 Dec 2011
Posts: 1
Location: New Zealand, Auckland
|
 Posted: Fri 23 Dec '11 9:26 Post subject: mod_security anti brute force script help |
 |
|
Hi all,
I'm trying to make a script that when an IP is repetitively hitting my admin folder (which empty), I'd like to deny that IP any activity on my website (in all locations) for a length of time.
At the moment I get this warning: "Unconditional match in SecAction". It doesn't stop the IP anyway.
I know this is wrong, but this is how far i've got:
| Code: | SecDataDir "C:\mysite\datastore"
<Location "/admin*">
SecAction "initcol:ip=%{REMOTE_ADDR},pass,phase:4,setvar:ip.block_script=+1,expirevar:ip.block_script=3000"
</Location>
SecRule IP:BLOCK_SCRIPT "@gt 3" deny
|
Kind Regards |
|
| Back to top |
|
|
|
|
|
|
