The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
31 views

ModEvasive Not Sending Email Alerts

I have installed ModEvasive on Ubuntu/Apache 14.04 server. Mod is working correctly and blocks DDOS attacks. But it doesn't trigger any email. I have correctly mentioned DOSEmailNotify in .conf file. ...
1
vote
2answers
232 views

modsecurity apache mod-security.conf missing [closed]

Greetings Serverfaultians. I'm not a server guy as you can see from my noob score of 1 point. But maybe those more versed can help me. I'm using Ubuntu v13.10 32-bit Server and Apache2 v2.4.6 and I'm ...
0
votes
0answers
119 views

mod_evasive blocking whitelisted ips?

I am running a trial stress test on my server with mod_evasive enabled and the loopback ip address whitelisted for the test as shown in the configuration below: DOSHashTableSize 3097 DOSPageCount ...
0
votes
0answers
102 views

How do I test Apache that mod_evasive is working for HTTPS virtual hosts?

I have enabled Apache mod_evasive on my web server. I have disabled my default virtual host and have set up several virtual hosts which server content via HTTPS. I would like to test that ...
0
votes
1answer
412 views

How to prevent mod_evasive false positives on partial downloads of large files

I am getting a lot of false positives notices sent by mod_evasive installed on my apache servers. They always happen on large PDF file downloads. When clients download PDFs from my site, they use many ...
0
votes
0answers
143 views

What advantages does mod_evasive have over mod_security2 in terms of DDOS protection?

I'm running an Apache2 server in front of a Tomcat and I need to implement a DDoS protection mechanism on the Apache2 layer. I have two candidates: mod_evasive and mod_security2 with the OWASP core ...
4
votes
2answers
565 views

Dangers to giving Apache user a shell

tl;dr - What are the dangers of giving Apache a shell in /etc/passwd? I'm working on getting mod_evasive set up with Apache to fight DOS attempts. I use the DOSSystemCommand to run a script that ...
0
votes
0answers
361 views

mod_evasive fails to add ip to firewall (iptables) on CentOS

My problem is same with this question but unfortunately this question has no answer mod_evasive DOSSystemCommand not working mod_evasive installed and works by giving 403 error which is fine. But I ...
0
votes
0answers
40 views

Apache limit mod_evasive

I have Apache 2.2 with mod_evasive. Is it possible to limit the module to specific paths (e.g. *.php)?
0
votes
1answer
144 views

mod_evasive apache module configuration issues

I have configured mod_evasive to not block google bot's IPs. But it's still banning google bots. Here is my configuration in /usr/local/apache/conf/httpd.conf: <IfModule mod_evasive20.c> ...
0
votes
1answer
439 views

Apache2: module evasive20_module is already loaded, skipping

I am installing mod_evasive on my Ubuntu LAMP server. I followed the simple directions: sudo apt-get install libapache2-mod-evasive sudo mkdir /var/log/mod_evasive sudo chown www-data:www-data ...
0
votes
1answer
666 views

mod_evasive DOSSystemCommand not working

I'm trying to get mod_evasive to fire off a script to add an iptables rule to deny the offending host. I've tried the suggestions from both answers here but I still can't get it working. Apart from ...
0
votes
2answers
743 views

Apache mod_evasive doesn't load

I am on a VPS (CentOs) running Apache and I would like to install Mod_Evasive. The problem is that I follow the installation steps without error but Apache doesn't load the module. Here are the step ...
0
votes
1answer
556 views

mod evasive not working properly on ubuntu 10.04

I have an ubuntu 10.04 server where I installed mod_evasive using apt-get install libapache2-mod-evasive I already tried several configurations, the result stays the same. The blocking does work, ...
2
votes
1answer
636 views

Is there any proper documentation for mod-evasive?

mod_evasive20 is one of the loaded modules on my httpd server. I read good things about how it can stop a DOS attack and wanted to try it out on my localhost. A search for mod_evasive turns up a blog ...
3
votes
1answer
1k views

IP flooding despite mod_evasive?

I have an Apache 2 server running PHP5, prefork MPM, eaccelerator and modevasive. My server sometimes goes down, apparently due to flooding from some IPs. At least this is what I understand from ...
2
votes
3answers
431 views

Block attacking IP addresses

I have a VM running about 100 websites, I run logwatch, blockhosts & mod_evasive, and between the three I have a pretty good idea what happens on a daily basis... though, I do get a lot of ...
3
votes
2answers
2k views

Allowing apache to write with iptables [duplicate]

Since to days ago I'm receiving DDOS atacks in my server. I've installed mod_evasive in apache and it works right! It writes the log and send the email with de IPs. But there's a problem: Apache ...
3
votes
1answer
1k views

mod_evasive behind HAPROXY

I have a couple of Apache 2 machines behind an HAPROXY setup, I tried to setup mod_evasive on those Apache machine while also using mod_rpaf to get the real X-FORWARDED client ip. For some reason, ...
0
votes
2answers
662 views

Apache2 random 403 error & info server busy logs on Ubuntu

I have a strange situation with apache2. Meanless, random 403 errors. Any page (html, php etc.) normally working. but if i request repeatedly by pressing refresh button of browser. it interrupts & ...