Re: [mod-security-users] SecRequestBodyLimit

[Thomas E. <tho...@gm...>]

I see the point in limiting memory consumption, so let me rephrase this:
Why is there a 'hard' limit ? For me that reads like "absolute,
non-configurable limit" which makes me wonder why I am not allowed to
increase it beyond 1GB. Did I miss the documentation stating how it is
possible after all ?

On Mon, Jun 10, 2013 at 4:21 PM, Reindl Harald <h.r...@th...>wrote:

>
>
> Am 10.06.2013 16:15, schrieb Thomas Eckert:
> > The docs on directives SecRequestBodyLimit and
> SecRequestBodyNoFilesLimit at
> >
> https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#wiki-SecRequestBodyLimit
> > state
> >   "There is a hard limit of 1 GB"
> >
> > Why is that ?
>
> to prevent a self-DOS?
>
> Description: Configures the maximum request body size ModSecurity™
> will accept for buffering implies MEMORY usage!
>
>
>
> ------------------------------------------------------------------------------
> How ServiceNow helps IT people transform IT departments:
> 1. A cloud service to automate IT design, transition and operations
> 2. Dashboards that offer high-level views of enterprise services
> 3. A single system of record for all IT processes
> http://p.sf.net/sfu/servicenow-d2d-j
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/
>
>