Mod-dos?

[timtrott]

Denial Of Service problems...

It appears that a lot of servers are being hit with a rather crude DOS attack that clones garbled email addresses into all fields of a response form. Several IP's are being used, many from AOL sources.

Is there some kind of MOD-DOS available for Apache 2 that is compatible with PSA? My tech tells me that I have a need for a "dynamic ACL" to limit the number of hits on a (any) particular file.

 

[wagnerch]

I use mod_dosevasive, it has been renamed to mod_evasive but it basically does what your looking for...

http://www.nuclearelephant.com/projects/mod_evasive/

 

[timtrott]

My tech found that one but we were concerned that it might tangle with Plesk somehow. If that's not a problem then it seems like it could be our answer.

Thanks!

 

[wagnerch]

I haven't had any problems with it. YMMV.

 

[timtrott]

It appears to require apxs. Where can I find that?

 

[wagnerch]

Originally posted by timtrott
It appears to require apxs. Where can I find that?

yum install httpd-devel

should do the trick, or you may want to download the httpd-devel package that matches up with your installation of httpd.

 

[timtrott]

Thanks. We'll check it out.

BTW, we're running Fedora C2 on one machine, RHEL 4ES on another. Are you running either one of these?

 

[wagnerch]

Originally posted by timtrott
Thanks. We'll check it out.

BTW, we're running Fedora C2 on one machine, RHEL 4ES on another. Are you running either one of these?

I am using FC2.

 

[timtrott]

Thanks. That will take care of one of them, anyway.

Do you know if there any other options that might work on RHEL4ES?

 

[wagnerch]

Originally posted by timtrott
Thanks. That will take care of one of them, anyway.

Do you know if there any other options that might work on RHEL4ES?

What makes you think mod_dosevasive won't work? I would just use mod_dosevasive, FC2 vs RHEL4 is NOT that different. They both have the 2.6.x series kernel, both should be using httpd 2.0.x, etc.

 

[timtrott]

Sorry to keep bothering you.

Mod-evasive wants apxs.

RHEL4ES: You suggested installing httpd-devel -- Did that. No apxs was included. -

Tried up2date -i apxs -- No such animal.

Searched RedHat -- No apxs.

Any suggestions?

 

[jamesyeeoc]

After installing httpd-devel RPM, did you update your locate database and then try to locate the apxs file? It should be there, generally in /usr/sbin/apxs

However, do NOT use /usr/local/psa/admin/bin/apxs
This is not the one you want.

 

[timtrott]

Bingo! Got it! Thanks!