[AusNOG] Protecting Web Hosting environments - was Re: DDOS mitigation

[Dobbins, Roland]

On May 13, 2013, at 2:59 PM, Tim March wrote:

> Mod_security is a great piece of software that is infinitely configurable and has has a number of up-to-date ruleset implementations available. 

Yes, and it's infinitely more useful than state-ridden so-called 'WAFs', which do nothing useful, and which constitute a major DDoS vector in and of themselves:

<https://www.box.com/s/a3oqqlgwe15j8svojvzl>

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton