How to minimise effect of mischievous, persistent POST requests
if you have root-access to that machine you could deploy snort/suricata with a limited ruleset, e.g. detect and block POST - requests.
pro:
- works on network-level
- ips can be blocked for a certain ammount of time
con:
- not-so-easy to setup and maintain, should be done by someone who knows how/what to do
easier: setup nginx infront of your apache and process your 403 from there, while passing valid requests to apache
pro:
- easy setup
- can handle more requests than apache
- limit-rate might be used on a ip-level
con:
- must be tested