New action: pause
I have added a new action to the CVS, called "pause". It accepts one parameter, time in milliseconds, and blocks response to the request when a filter is triggered. I've been told that it can be really useful for blocking automated discovery tools.
Cool. Thanks Ivan. Now I can take the "sleep" parameter out of my CGI scripts and use it in mod_security instead :) You are right, I have used the sleep time before and it can make vulnerability scanners such as Whisker abort if you set a high enough setting (I set 60 secs).
Keep up the good work.
-Ryan
Posted by: Ryan Barnett | 03 August 2003 at 08:04 PM