Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Well I find this 3 apache modules (mod_evasive, mod_qos, mod_security) but I want to know wich is better to defend my server from a Denial-of-service attack?

Server version: Apache/2.2.17 (Win32) Server built: Oct 18 2010 19:45:39

On Microsoft Windows [Version 6.1.7600] and Microsoft Windows [Version 5.2.3790]

Also if you know a better one please tell me!!!

share|improve this question

closed as too broad by Ward, masegaloeh, kasperd, 84104, Jenny D Apr 19 '15 at 18:47

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

This question is bad on so many levels. First you should read the faq, then you should read How to Ask a Question. – MDMarra Nov 3 '11 at 15:36

I'd be much more concerned about the fact that you're running 2.2.17, which is vulnerable to the Range Header DOS attack on unpatched Windows. 6.1.7600 is either Windows 7 or Windows Server 2008 R2 without SP1 installed.

All of the Apache modules in the world won't save you from a kernel vulnerability or Apache vulnerability like the range header exploit.

Also, running Apache on Windows in production is just weird, IMO. It's kind of a bolt-on implementation as opposed to the Linux/Unix native implementation.

As far as the modules that you're asking about. Read here. Apache HTTPD server is extremely well documented.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.