Re: [mod-security-users] Working Around Race Conditions in Persistent Storage

[Christian F. <chr...@ne...>]

On Thu, Sep 08, 2016 at 09:39:25AM -0500, Riemann . wrote:
> Thanks Christian. We only use Windows servers in production, so I haven't
> tried this under Unix. It might be that this specific behavior is specific
> to the Windows install (which probably isn't the most typical for ModSec
> users).

According do Felipe rather not. But it might be worth a try.

> I appreciate your suggestions--and I'll definitely look into using a custom
> Apache log and trying to parse and alert on that as an alternative option.

https://www.netnea.com/cms/flying-frog-anti-ddos-script/ might bring
some inspiration. It's more of a proof of concept, but I still think the
idea is neat.

Cheers,

Christian


-- 
There is one rule, above all others, for being a man. 
Whatever comes, face it on your feet.
-- Robert Jordan