filtering large request with help of content-length is not working

[nedy13]

I use the following rule and want to block all requests greater 2MB. I tested a lot and found out that the operator function is not working correctly. It always compares via string equal. When I configured a known content-length value and this matches exactly the value, I receive a 413 error.

<rule>
<name>BlockLargeRequests</name>
<condition name="content-length" operator="greater">2097152</condition>
<set type="status">413</set>
<to last="true">null</to>
</rule>

The status page show me the following:

BlockLargeRequests (rule 1)

URL's matching ^(.*)$ will be forwarded to null.

This rule and it's conditions will use the regex matching engine.

Given that the following condition is met.

The content-length HTTP header matches the value 2097152

This rule will set:

status to 413