Apache2 – mod_evasive


Vediamo come prevenire attacchi DDOS con questo modulo di apache:

# up2date -i httpd-devel
# cd /usr/local/src
# wget http://www.zdziarski.com/blog/wp-content/uploads/2010/02/mod_evasive_1.10.1.tar.gz
# tar -zxvf mod_evasive_1.10.1.tar.gz
# cd mod_evasive
# /usr/sbin/apxs -cia mod_evasive20.c

Adesso aggiungiamo quanto segue in /etc/apache2/apache2.conf

<IfModule mod_evasive20.c>
DOSHashTableSize 3097
DOSPageCount 5
DOSSiteCount 100
DOSPageInterval 1
DOSSiteInterval 1
DOSBlockingPeriod 600

</IfModule>

# /etc/init.d/apache2 restart

Share

, ,

  1. No comments yet.
(will not be published)