Forum Discussion
zak_thompson_86
Nimbostratus
NimbostratusBrute Force Blocking script
hi guys, new to the forum we just picked up a 6800 since our old D25 couldn't handle capacity, Anywho we needed a better way to block brute force attacks.
So in CodeShare I found the DNS Flood ...
samstep
Cirrocumulus
CirrocumulusYou need to collect the data in
"when HTTP_RESPONSE...." event
using HTTP::collect method
then search for your trigger string in "when HTTP_RESPONSE_DATA" event using HTTP::payload
---
Sam
