[–] pendexgabo 10y ago ↗ huge WTF...you can't call that WAF...At least try adding some more rules. [–] TylerE 10y ago ↗ Hell, .htaccess being ENABLED is borderline WTF on a real production server. [–] jonathonf 10y ago ↗ I don't think they know what a WAF actually is.Blocking IP addresses in an .htaccess file? That's literally* what a firewall is for.*metaphysically?
[–] jonathonf 10y ago ↗ I don't think they know what a WAF actually is.Blocking IP addresses in an .htaccess file? That's literally* what a firewall is for.*metaphysically?
[–] username_potato 10y ago ↗ The problem is, the request still hits Apache, so you can still get DDOSed.A proper WAF will drop requests before they hit the web server software, or even better, before hitting the server at all.
4 comments
[ 3.3 ms ] story [ 22.0 ms ] threadBlocking IP addresses in an .htaccess file? That's literally* what a firewall is for.
*metaphysically?
A proper WAF will drop requests before they hit the web server software, or even better, before hitting the server at all.