[mod-security-users] SpiderLabs rules slow to load
Brought to you by:
victorhora,
zimmerletw
From: Ben W. <ben...@jo...> - 2013-03-20 21:50:20
|
After upgrading to modsecurity 2.7.2, the apache reload time has increased to over 30 seconds. It was less than 2 seconds with 2.6.8. The cause appears to be the SpiderLabs ruleset. These are the rules enabled: slr_vuln_rules/owasp_crs_integration/attack_type/modsecurity_slr_46_lfi_attacks.conf slr_vuln_rules/owasp_crs_integration/attack_type/modsecurity_slr_46_rfi_attacks.conf slr_vuln_rules/owasp_crs_integration/attack_type/modsecurity_slr_46_sqli_attacks.conf slr_vuln_rules/owasp_crs_integration/attack_type/modsecurity_slr_46_xss_attacks.conf slr_vuln_rules/modsecurity_slr_50_malware_detection.conf Anyone else experienced this and know how to reduce reload time? Thanks Ben |