Page 1 of 1

LF_QOS not working

Posted: 05 Oct 2015, 01:20
by grahamspr
I'm having problems with LF_QOS which use to work but seems not to be working anymore

mod_qos is configured for 10 requests in 60s to .php scripts, if thats is exceed it throws a 500 error.

mod_qos is working correctly it's throwing the error and reporting it to the apache error_log, shown below however csf is no longer blocking them as per it's config

LF_TRIGGER = 0
LF_QOS = 5
LF_QOS_PERM = 3600

LF_MODSEC is working correctly with the same settings.

Code: Select all

[Mon Oct 05 00:55:30 2015] [error] [client x.x.x.x] mod_qos(067): access denied, QS_ClientEventLimitCount rule: event=QS_Limit, max=11, current=11, age=25, c=x.x.x.x, id=VhG8crxBJwcAAEk79rEAAAAD, referer: https://www.domain.com/
[Mon Oct 05 00:55:31 2015] [error] [client x.x.x.x] mod_qos(067): access denied, QS_ClientEventLimitCount rule: event=QS_Limit, max=11, current=12, age=26, c=x.x.x.x, id=VhG8c7xBJwcAAEk89uUAAAAH, referer: https://www.domain.com/
[Mon Oct 05 00:55:31 2015] [error] [client x.x.x.x] mod_qos(067): access denied, QS_ClientEventLimitCount rule: event=QS_Limit, max=11, current=13, age=26, c=x.x.x.x, id=VhG8c7xBJwcAAEmH9-EAAAAM, referer: https://www.domain.com/
[Mon Oct 05 00:55:32 2015] [error] [client x.x.x.x] mod_qos(067): access denied, QS_ClientEventLimitCount rule: event=QS_Limit, max=11, current=14, age=27, c=x.x.x.x, id=VhG8dLxBJwcAAD-1UroAAAAF, referer: https://www.domain.com/
[Mon Oct 05 00:55:33 2015] [error] [client x.x.x.x] mod_qos(067): access denied, QS_ClientEventLimitCount rule: event=QS_Limit, max=11, current=15, age=28, c=x.x.x.x, id=VhG8dbxBJwcAAELZeLUAAAAI, referer: https://www.domain.com/
[Mon Oct 05 00:55:34 2015] [error] [client x.x.x.x] mod_qos(067): access denied, QS_ClientEventLimitCount rule: event=QS_Limit, max=11, current=16, age=29, c=x.x.x.x, id=VhG8drxBJwcAAEmF93kAAAAJ, referer: https://www.domain.com/
[Mon Oct 05 00:55:35 2015] [error] [client x.x.x.x] mod_qos(067): access denied, QS_ClientEventLimitCount rule: event=QS_Limit, max=11, current=17, age=30, c=x.x.x.x, id=VhG8d7xBJwcAAEdx0Y0AAAAE, referer: https://www.domain.com/
[Mon Oct 05 00:55:36 2015] [error] [client x.x.x.x] mod_qos(067): access denied, QS_ClientEventLimitCount rule: event=QS_Limit, max=11, current=18, age=31, c=x.x.x.x, id=VhG8eLxBJwcAAEgc7I8AAAAC, referer: https://www.domain.com/
[Mon Oct 05 00:55:37 2015] [error] [client x.x.x.x] mod_qos(067): access denied, QS_ClientEventLimitCount rule: event=QS_Limit, max=11, current=19, age=32, c=x.x.x.x, id=VhG8ebxBJwcAAEk79rIAAAAD, referer: https://www.domain.com/
[Mon Oct 05 00:55:38 2015] [error] [client x.x.x.x] mod_qos(067): access denied, QS_ClientEventLimitCount rule: event=QS_Limit, max=11, current=20, age=33, c=x.x.x.x, id=VhG8erxBJwcAAEmH9-IAAAAM, referer: https://www.domain.com/
[Mon Oct 05 00:55:39 2015] [error] [client x.x.x.x] mod_qos(067): access denied, QS_ClientEventLimitCount rule: event=QS_Limit, max=11, current=21, age=34, c=x.x.x.x, id=VhG8e7xBJwcAAD-1UrsAAAAF, referer: https://www.domain.com/
[Mon Oct 05 00:55:39 2015] [error] [client x.x.x.x] mod_qos(067): access denied, QS_ClientEventLimitCount rule: event=QS_Limit, max=11, current=22, age=34, c=x.x.x.x, id=VhG8e7xBJwcAAEmF93oAAAAJ, referer: https://www.domain.com/
[Mon Oct 05 00:55:40 2015] [error] [client x.x.x.x] mod_qos(067): access denied, QS_ClientEventLimitCount rule: event=QS_Limit, max=11, current=23, age=35, c=x.x.x.x, id=VhG8fLxBJwcAAEmm-A0AAAAX, referer: https://www.domain.com/
[Mon Oct 05 00:55:41 2015] [error] [client x.x.x.x] mod_qos(067): access denied, QS_ClientEventLimitCount rule: event=QS_Limit, max=11, current=24, age=36, c=x.x.x.x, id=VhG8fbxBJwcAAEdx0Y4AAAAE, referer: https://www.domain.com/
[Mon Oct 05 00:55:42 2015] [error] [client x.x.x.x] mod_qos(067): access denied, QS_ClientEventLimitCount rule: event=QS_Limit, max=11, current=25, age=37, c=x.x.x.x, id=VhG8frxBJwcAAEmh@pAAAAAR, referer: https://www.domain.com/

Re: LF_QOS not working

Posted: 14 Oct 2015, 16:05
by ForumAdmin
edit: We will have an updated regex for this in the next release.

Re: LF_QOS not working

Posted: 23 Dec 2015, 16:52
by dannato
Hello,
do you have any news about ? LF_QOS still not working for us in release: csf: v8.08 (cPanel)

Waiting for your reply

Best regards