OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [ANNOUNCE] mod_security 1.5 released

From: Ivan Ristic (ivanrwebkreator.com)
Date: Tue Jun 03 2003 - 15:01:16 CDT


r e m a l . c o m wrote:
> hi, the features are wonderful...
> i installed the mod on one of the web servers, before the installion the
> load avrg was 1 to 2
> after installing mod_security, the load went crazy to something like 40 to
> 60 !

   Assuming it isn't a bug of some kind, you have to be careful
   with filters, especially if there are large POST payloads being
   transmitted.

   How many requests are you serving per second? Also, you should
   check whether you are still logging debug info, there is a *lot*
   of logging going on. That alone could bring your web server down
   to a crawl.

   To turn off debug logging simply comment the "SecFilterDebugLog"
   and "SecFilterDebugLevel" directives.

   Why don't you send me your configuration to my email address (or
   even better, to mod-security-userslists.sourceforge.net) and we
   will take it from there?

Bye,
Ivan