0

I checked the core rules set in the mod-security but it's didn't contain the rules related to Brute-Force Attack!!! Did anyone know how to write the rules or the existing rules for this kind of Attack!

Thanks in advanced,

0

2 Answers 2

1

It's a better idea to have some daemon monitoring the logs and taking action. Fail2Ban works wonders for me. Alternatives exist.

0

Check is post: http://www.dongit.nl/tech/modsecurity-brute-force-protection

1
  • 2
    Link-and-run answers are discouraged here on ServerFault. It is polite to include at least a summary of what the article contains, even if it is just the very broad steps. If they need detail, they can click.
    – sysadmin1138
    Jun 8, 2011 at 11:26

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .