|
This blog has moved! Please update your bookmarks to http://www.blog.modsecurity.org. |
« Added Unicode encoding validation | Main | Output filtering now in CVS »
Posted by ivanr on July 31, 2003.
I have added a new action to the CVS, called "pause". It accepts one parameter, time in milliseconds, and blocks response to the request when a filter is triggered. I've been told that it can be really useful for blocking automated discovery tools.
Posted by ivanr at July 31, 2003 04:38 PM
Cool. Thanks Ivan. Now I can take the "sleep" parameter out of my CGI scripts and use it in mod_security instead :) You are right, I have used the sleep time before and it can make vulnerability scanners such as Whisker abort if you set a high enough setting (I set 60 secs).
Keep up the good work.
-Ryan
Posted by: Ryan Barnett at August 3, 2003 05:04 PM