ModSecurity Breach

ModSecurity Blog

« Added Unicode encoding validation | Main | Output filtering now in CVS »

New action: pause

I have added a new action to the CVS, called "pause". It accepts one parameter, time in milliseconds, and blocks response to the request when a filter is triggered. I've been told that it can be really useful for blocking automated discovery tools.

Cool. Thanks Ivan. Now I can take the "sleep" parameter out of my CGI scripts and use it in mod_security instead :) You are right, I have used the sleep time before and it can make vulnerability scanners such as Whisker abort if you set a high enough setting (I set 60 secs).

Keep up the good work.
-Ryan

The comments to this entry are closed.

Calendar

November 2010
Sun Mon Tue Wed Thu Fri Sat
1 2 3 4 5 6
7 8 9 10 11 12 13
14 15 16 17 18 19 20
21 22 23 24 25 26 27
28 29 30

Feeds

Atom Feed

Search

Categories

Recent Entries

Archives