Re: [mod-security-users] @pmFromFile IP range question

[Christian B. <ch...@jw...>]

Am 18.05.2011 um 11:41 schrieb Phoenix Kiula:

>> no, this is not possible. The @pm and @pmFromFile operator simply check
>> for containment of a string.
>> In your example, REMOTE_ADDR will be checked if it contains either
>> 
>>   127.0.0.1    OR    69.22.0.0/16   OR    128.74.121.0/24
>> 
> 
> 
> Thanks Christian.
> 
> Is there any limit to this file? I have a fast server with 8GB or RAM
> etc, 64bit and all. Apache and Postgres are the main processes.
> 
> Is it correct the the contents of the file are loaded into memory when
> Apache starts?
> 

Yes, IIRC the patterns of that file are merged into a prefix-tree to speed up
the lookup. This should be done at Apache startup time.

Regards,
   Chris