I'm unable to stop a SlowLoris attack using ModSecurity in my apache (2.4) server from a computer that is in the same network.
I'm on Debian 11.
I add this to the /etc/modsecurity/modsecurity.conf :
SecConnReadStateLimit 5
And set this to On:
SecRuleEngine On
I'm using this to execute the attack:
slowhttptest -H -c 1000 -i 1 -r 200 -x 24 -p 5 -t GET -u http://10.11.48.76:80
And yes I do: systemctl restart apache2