[cgiapp] Re: ANNOUNCEMENT: CGI::Application::Plugin::RateLimit v1.0

[Mark Stosberg <suppressed>]

On 2006-05-05, Steve Comrie <suppressed> wrote:
>>
>> DESCRIPTION
>>
>>     This module provides protection against a user calling a runmode
>>     too frequently.  A typical use-case might be a contact form that
>>     sends email.  d like to allow your users to send you messages, but
>>     thousands of messages from a single user would be a problem.

I can see how this would be helpful.

We use mod_evasive for Apache as a general tool to prevent repeated
requests to the same page.

 http://www.nuclearelephant.com/projects/mod_evasive/

It works fairly well, but doesn't protect against distributed attacks (which can look like
legimate heavy traffic), or attacks that request many pages in a
round-robin fashion.  

    Mark


---------------------------------------------------------------------
Web Archive:  http://www.mail-archive.com/suppressed/
              http://marc.theaimsgroup.com/?l=cgiapp&r=1&w=2
To unsubscribe, e-mail: suppressed
For additional commands, e-mail: suppressed