Re: [mod-security-users] mod_security - alert mail

[Reindl H. <h.r...@th...>]

Am 11.01.2018 um 17:13 schrieb Edouard Guigné:
> Hello Dear Mod_security users,
> 
> I spend time on my server logs to check if there is any attacks detected 
> by mod_security.
> 
> I supposed users often ask for this, is there a way to configure 
> mod_security to get alert emails when some rules are activated ?
> And to configure what activated rules are allowed to send email alert ? 
> (I do not want every activated rules send alert by email)

have fun when you are under attack - invitation for a self-DOS

grep your logs and generate mails based on that in a regulary time 
schedule like once out twice per hour but don't consider it a smart idea 
that a attacker on a webserver can instantly attack your mailserver and 
inbox too