Hi guys, I was just working on something very similar, however a bit more complex than you're considering:
For given requests: GET /file&id=123&id2=1 GET /file&id=476&id2=1 GET /file&id=111&id2=1 GET /file&id=111&id2=1 GET /file&id=111&id2=2 GET /file&id=476&id2=2 I would like to reject the connection if pair (id,id2) repeats more than X times. Parameters in url can be in any order and it would be perfect to create a whitelist to some of them. I've tried to use two track-sc* directives with a condition, but it does not work at all. Is it possible to do it with ulrp_reg in acl an therefore count the requests? Is it even possible with any other methods? And what if we have 3 parameters to match? :) -- Ślepy Korzeń -- http://slepykorzen.pl http://blindroot.pl http://blindroot.com > Hello > > Chris and I followed this example but found that it limits by url but for all > users. that might be what you want in a slashdotting but its not what we want > for individual users falling asleep with nose on f5(reload) key > > we looked at base32+src rather than url but that excludes the url parameters > > I've started a separate thread with a new url32+src function.
