Apache mod-security

ip collection rotation?

hi,

is it possible to clean up the ip collection via scripts because the file size is growing up extreamely...

Normally the garbage collection is doing this... but perphaps is there a option to set the ip collection size up to 200 MB and than clean up or rotate?

Best regards,

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2

_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

headers

Josh Amishav-Zlatin | 5 Feb 10:49

Re: ip collection rotation?

On Sun, Feb 5, 2012 at 11:26 AM, Otto Schlagmichtot <hx2680 <at> yahoo.com> wrote:

hi,

is it possible to clean up the ip collection via scripts because the file size is growing up extreamely...

Hi Otto,

You can create a ModSec rule to delete records older then a certain time by using the setvar operator and ! negation.

Normally the garbage collection is doing this.

If the default timeout is too long, you might want to using something like setvar:IP.TIMEOUT=1800 or change the SecCollectionTimeout directive.

- Josh

.. but perphaps is there a option to set the ip collection size up to 200 MB and than clean up or rotate?

Best regards,

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2

_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/

headers

Come Again | 5 Feb 14:45

Re: ip collection rotation?

Once my server was slowing down and unresponsive. It was all of sudden doing a lot if disk I/O and I thought my system was under some kind of DOS attack. Later it turned out that this all was because of the extreme size of resource file.

Date: Sun, 5 Feb 2012 09:26:36 +0000
From: hx2680 <at> yahoo.com
To: mod-security-users <at> lists.sourceforge.net
Subject: [mod-security-users] ip collection rotation?

hi,

is it possible to clean up the ip collection via scripts because the file size is growing up extreamely...

Normally the garbage collection is doing this... but perphaps is there a option to set the ip collection size up to 200 MB and than clean up or rotate?

Best regards,

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2

_______________________________________________
mod-security-users mailing list
mod-security-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/