Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I use modsecurity on my Drupal forum.

At the moment it stops pretty much everything that gets thrown at it, and the rest is stopped with Bad Behaviour and Mollom.

Legit posts still turn up no worries. All the crap just falls away.

I also have fail2ban rules in, so those that trigger modsecurity too many times get added and iptabled. Helps cut down on the repeat attempts.

I don't think it's hard to block spam. I do agree it's time consuming though, keeping everything up to date.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: