I want to use mod security for preventing DDos attack. The problem is that the client IP address comes to us in a custom header. Can the mod security be configured so that it uses the custom header to get the IP and not the remote header.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I want to use mod security for preventing DDos attack. The problem is that the client IP address comes to us in a custom header. Can the mod security be configured so that it uses the custom header to get the IP and not the remote header.