--- Rich <app1@xxxxxxxxxxxx> wrote: > You can configure mod_securiy so that it will not > respond at all - ie - > it will just leave the client hanging waiting for a > response (which it > will never get). Much like a 'silent' firewall. > > As I said, not ideal (the connection is still live), > but at least you > can suppress any outgoing data. Yes, I read about this possibility in the modsecurity documentation. However, this does not seem acceptable, because too many "hanging" connections would very likely cause DoS in a very short time. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx