How to limit access rate by header?
Luciano Guillermo Fantuzzi <[email protected]>
| Newsgroups | gmane.comp.apache.mod-security.user |
|---|---|
| Message-ID | <CALSHm0TWxURVAyzf34cfqTAvdkq4_wj-iaBcCwMaFBK0ZALWwA@mail.gmail.com> |
First of all, I'm new here so I'm not sure this is the right place for asking for help (free modsec version). If it's not, I'll really appreciate it if you can tell me where should I go. I'm trying to limit hit rate by: 1. Request's header (like "facebookexternalhit"). 2. (All hits to non static resources) And then return a friendly "429 Too Many Requests" and "Retry-After: 3" (seconds). I know I can read a file of headers like: SecRule REQUEST_HEADERS:User-Agent "@pmFromFile ratelimit-bots.txt" But I'm getting trouble building the entire rule. Any help would be really appreciated. Thank you! _______________________________________________ mod-security-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/mod-security-users Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: http://www.modsecurity.org/projects/commercial/rules/ http://www.modsecurity.org/projects/commercial/support/