Re: My variable seems to never expire...
Ervin Hegedüs <[email protected]>
| Newsgroups | gmane.comp.apache.mod-security.user |
|---|---|
| Message-ID | <[email protected]> |
Hi Mikaël,
On Thu, Sep 17, 2020 at 06:38:58PM +0200, Mikaël Pirio wrote:
> @Ervin Thanks. These rules seems to work:
...
> #
> # If max counter is reached AND it's an API request, deny it
> #
> SecRule SESSION:API_REQ_COUNTER "@gt %{tx.api_req_counter_max}" \
> "id:5,\
> deny,\
> status:429,\
> log,\
> msg:'RATELIMITED',\
> chain"
> SecRule TX:IS_API_REQ "@eq 1"
>
it's good to know - thank you!
a.
_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/