search

p0pr0ck5 / lua-resty-waf

High-performance WAF built on the OpenResty stack
GNU General Public License v3.0
1.28k stars 305 forks source link

Automatic IP Banning #273

Closed rm3nchaca closed 7 years ago

rm3nchaca commented 7 years ago

Hi! Is there a way to automatically deny an IP for a period of time, for example, after N malicious requests? Thank you!

p0pr0ck5 commented 7 years ago

You'll need to write or use existing ModSecurity rules for this. The OWASP rules, which this project supports, already have an example of this: https://github.com/SpiderLabs/owasp-modsecurity-crs/blob/v3.0/master/rules/REQUEST-912-DOS-PROTECTION.conf

rm3nchaca commented 7 years ago

Thanks, I'll try that way.!