I checked the core rules set in the mod-security but it's didn't contain the rules related to Brute-Force Attack!!! Did anyone know how to write the rules or the existing rules for this kind of Attack!

Thanks in advanced,

link|improve this question
feedback

migrated from stackoverflow.com Sep 7 '09 at 8:23

This question came from our site for professional and enthusiast programmers.

2 Answers

It's a better idea to have some daemon monitoring the logs and taking action. Fail2Ban works wonders for me. Alternatives exist.

link|improve this answer
feedback

Check is post: http://www.dongit.nl/tech/modsecurity-brute-force-protection

link|improve this answer
1  
Link-and-run answers are discouraged here on ServerFault. It is polite to include at least a summary of what the article contains, even if it is just the very broad steps. If they need detail, they can click. – sysadmin1138 Jun 8 '11 at 11:26
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.