Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I installed the mod_security version 2.5.13 with apache2 and I'm facing problem with SecResponseBodyLimit: ( ModSecurity: Output filter: Response body too large (over limit of 524288, total not specified))

and my question is: what is the impact of increasing the SecResponseBodyLimit from default value (512k) to (5M) ?

share|improve this question
add comment

2 Answers 2

It means that anything over that limit will be rejected with a 500-Internal Server Error code.

To change what it does when it hits that error the SecResponseBodyLimitAction directive affects that.

By default, ModSecurity will reject a response body that is longer than specified. Some web sites, however, will produce very long responses, making it difficult to come up with a reasonable limit.

Reject causes the 500 error, where ProcessPartial allows even long responses to be allowed, but only the first part of long responses will be processed against mod_security.

https://lists.owasp.org/pipermail/owasp-modsecurity-core-rule-set/2011-April/000694.html

share|improve this answer
add comment

https://lists.owasp.org/pipermail/owasp-modsecurity-core-rule-set/2011-April/000694.html

share|improve this answer
    
Welcome to Server Fault! Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference. –  Iain Sep 18 '11 at 14:30
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.