Results 1 to 20 of 20
  1. #1
    Join Date
    Jan 2005
    Location
    Scotland, UK
    Posts
    2,681

    Install mod_evasive

    Oringal Guide: http://www.hostgeekz.com/guides/Secu...od_evasive.htm


    Please use the above link for any updated versions.

    Installing mod_evasive (formally known as mod_dosevasive)

    Login too your server and execute

    cd /usr/local/src
    wget http://www.nuclearelephant.com/proje..._1.10.1.tar.gz
    tar -zxvf mod_evasive_1.10.1.tar.gz
    cd mod_evasive


    For apache 2.0.x

    /usr/sbin/apxs -cia mod_evasive20.c

    Then add add this too httpd.conf

    <IfModule mod_evasive20.c>
    DOSHashTableSize 3097
    DOSPageCount 6
    DOSSiteCount 100
    DOSPageInterval 2
    DOSSiteInterval 2
    DOSBlockingPeriod 600
    </IfModule>




    For apache 1.3.x

    /usr/local/apache/bin/apxs -cia mod_evasive.c

    Then add this too httpd.conf

    <IfModule mod_evasive.c>
    DOSHashTableSize 3097
    DOSPageCount 6
    DOSSiteCount 100
    DOSPageInterval 2
    DOSSiteInterval 2
    DOSBlockingPeriod 600
    </IfModule>



    Now just restart apache and the installation is complete.

    /etc/init.d/httpd restart
    Server Management - AdminGeekZ.com
    Infrastructure Management, Web Application Performance, mySQL DBA. System Automation.
    WordPress/Magento Performance, Apache to Nginx Conversion, Varnish Implimentation, DDoS Protection, Custom Nginx Modules
    Check our wordpress varnish plugin. Contact us for quote: sales@admingeekz.com

  2. #2
    I have a AMD 2.8GHz box with 1GB RAM and running RH LE3 with Plesk 7.5.4 when I tried to install that module, it failed and gave me the below error

    [root@xxxxx mod_evasive]# /usr/local/psa/admin/bin/apxs -cia mod_evasive20.c
    gcc-3.4 -DHARD_SERVER_LIMIT=512 -DDEFAULT_PATH="/usr/local/psa/admin/bin:/bin:/usr/bin" -DLINUX=2
    2 -DTARGET="httpsd" -DHAVE_SET_DUMPABLE -I/usr/include/gdbm -DMOD_SSL=208122 -DEAPI -O -pipe -I/
    home/builder/pb_work_dir/psa_aiconfig_7.5.4/psa/release/openssl/include -W -Wall -I/home/builder/
    pb_work_dir/psa_aiconfig_7.5.4/psa/lib/dist/usr/include -DPLESK_Linux -I/home/builder/pb_work_dir
    /psa_aiconfig_7.5.4/psa/plesk-utils/include -DBSG_CR -DBSG_MSG -I/home/builder/pb_work_dir/psa_ai
    config_7.5.4/psa/release/openssl/include -DHAS_RPM -O3 -fexpensive-optimizations -I/usr/kerberos/
    include -fstrength-reduce -pipe -I/home/builder/pb_work_dir/psa_aiconfig_7.5.4/psa/lib/dist/usr/i
    nclude -I/usr/include/libxml2 -Wno-unused-parameter -fpic -DSHARED_MODULE -I/usr/local/psa/admin/
    include -c mod_evasive20.c
    sh: line 1: gcc-3.4: command not found
    apxs:Break: Command failed with rc=127
    [root@xxxxx mod_evasive]#

    any help?

  3. #3

    BRoke something

    I installed this and now when I try to restart I get this:

    /etc/init.d/httpd restart: configuration broken, ignoring restart
    /etc/init.d/httpd restart: (run 'apachectl configtest' for details)


    Any Ideas?
    Thanks, Kevin

  4. #4
    Join Date
    Jan 2005
    Location
    Scotland, UK
    Posts
    2,681
    Quote Originally Posted by jwagdy
    I have a AMD 2.8GHz box with 1GB RAM and running RH LE3 with Plesk 7.5.4 when I tried to install that module, it failed and gave me the below error

    [root@xxxxx mod_evasive]# /usr/local/psa/admin/bin/apxs -cia mod_evasive20.c
    gcc-3.4 -DHARD_SERVER_LIMIT=512 -DDEFAULT_PATH="/usr/local/psa/admin/bin:/bin:/usr/bin" -DLINUX=2
    2 -DTARGET="httpsd" -DHAVE_SET_DUMPABLE -I/usr/include/gdbm -DMOD_SSL=208122 -DEAPI -O -pipe -I/
    home/builder/pb_work_dir/psa_aiconfig_7.5.4/psa/release/openssl/include -W -Wall -I/home/builder/
    pb_work_dir/psa_aiconfig_7.5.4/psa/lib/dist/usr/include -DPLESK_Linux -I/home/builder/pb_work_dir
    /psa_aiconfig_7.5.4/psa/plesk-utils/include -DBSG_CR -DBSG_MSG -I/home/builder/pb_work_dir/psa_ai
    config_7.5.4/psa/release/openssl/include -DHAS_RPM -O3 -fexpensive-optimizations -I/usr/kerberos/
    include -fstrength-reduce -pipe -I/home/builder/pb_work_dir/psa_aiconfig_7.5.4/psa/lib/dist/usr/i
    nclude -I/usr/include/libxml2 -Wno-unused-parameter -fpic -DSHARED_MODULE -I/usr/local/psa/admin/
    include -c mod_evasive20.c
    sh: line 1: gcc-3.4: command not found
    apxs:Break: Command failed with rc=127
    [root@xxxxx mod_evasive]#

    any help?

    What goes gcc -v return?

    Quote Originally Posted by lexis2004
    I installed this and now when I try to restart I get this:

    /etc/init.d/httpd restart: configuration broken, ignoring restart
    /etc/init.d/httpd restart: (run 'apachectl configtest' for details)


    Any Ideas?
    Can you paste the output from configtest.

    -Scott
    Server Management - AdminGeekZ.com
    Infrastructure Management, Web Application Performance, mySQL DBA. System Automation.
    WordPress/Magento Performance, Apache to Nginx Conversion, Varnish Implimentation, DDoS Protection, Custom Nginx Modules
    Check our wordpress varnish plugin. Contact us for quote: sales@admingeekz.com

  5. #5
    I have the official RedHat version 2.96

  6. #6
    Join Date
    Jan 2005
    Location
    Scotland, UK
    Posts
    2,681
    Quote Originally Posted by jwagdy
    I have the official RedHat version 2.96
    Use

    export CC=/path/to/gcc-x.x
    Server Management - AdminGeekZ.com
    Infrastructure Management, Web Application Performance, mySQL DBA. System Automation.
    WordPress/Magento Performance, Apache to Nginx Conversion, Varnish Implimentation, DDoS Protection, Custom Nginx Modules
    Check our wordpress varnish plugin. Contact us for quote: sales@admingeekz.com

  7. #7
    this is what I get when I used gcc -v

    [root@xxxxxxxx data_admin]# gcc -v
    Reading specs from /usr/lib/gcc-lib/i386-redhat-linux/3.2.3/specs
    Configured with: ../configure --prefix=/usr --mandir=/usr/share/man --infodir=/usr/share/info --e
    nable-shared --enable-threads=posix --disable-checking --with-system-zlib --enable-__cxa_atexit -
    -host=i386-redhat-linux
    Thread model: posix
    gcc version 3.2.3 20030502 (Red Hat Linux 3.2.3-53)
    [root@xxxxxxxx data_admin]#

  8. #8
    I found it, a copy and paste type.

    Thanks anyhow.
    Thanks, Kevin

  9. #9
    help!!!!!!!!
    I really need to have this mod installed. can any one help?

    I have RH EL 3 running Plesk 7.5.4

    gcc version
    [root@xxxxxx mod_evasive]# gcc -v
    Reading specs from /usr/lib/gcc-lib/i386-redhat-linux/3.2.3/specs
    Configured with: ../configure --prefix=/usr --mandir=/usr/share/man --infodir=/u
    sr/share/info --enable-shared --enable-threads=posix --disable-checking --with-s
    ystem-zlib --enable-__cxa_atexit --host=i386-redhat-linux
    Thread model: posix
    gcc version 3.2.3 20030502 (Red Hat Linux 3.2.3-53)

    httpd version
    [root@xxxxxx mod_evasive]# httpd -v
    Server version: Apache/2.0.46
    Server built: Dec 15 2005 04:19:10

    Can any one help?

  10. #10
    Join Date
    Jan 2005
    Location
    Scotland, UK
    Posts
    2,681
    export CC=/usr/bin/gcc-3.2.3

    and compile, if that doesn't work paste the output of

    ls -al /usr/bin | grep -i gcc
    Server Management - AdminGeekZ.com
    Infrastructure Management, Web Application Performance, mySQL DBA. System Automation.
    WordPress/Magento Performance, Apache to Nginx Conversion, Varnish Implimentation, DDoS Protection, Custom Nginx Modules
    Check our wordpress varnish plugin. Contact us for quote: sales@admingeekz.com

  11. #11
    I did but I got the same error again

    [root@xxxxxx mod_evasive]# export CC=/usr/bin/gcc-3.2.3
    [root@xxxxxx mod_evasive]# /usr/local/psa/admin/bin/apxs -cia mod_evasive20.c
    gcc-3.4 -DHARD_SERVER_LIMIT=512 -DDEFAULT_PATH="/usr/local/psa/admin/bin:/bin:/usr/bin" -DLINUX=2
    2 -DTARGET="httpsd" -DHAVE_SET_DUMPABLE -I/usr/include/gdbm -DMOD_SSL=208122 -DEAPI -O -pipe -I/
    home/builder/pb_work_dir/psa_aiconfig_7.5.4/psa/release/openssl/include -W -Wall -I/home/builder/
    pb_work_dir/psa_aiconfig_7.5.4/psa/lib/dist/usr/include -DPLESK_Linux -I/home/builder/pb_work_dir
    /psa_aiconfig_7.5.4/psa/plesk-utils/include -DBSG_CR -DBSG_MSG -I/home/builder/pb_work_dir/psa_ai
    config_7.5.4/psa/release/openssl/include -DHAS_RPM -O3 -fexpensive-optimizations -I/usr/kerberos/
    include -fstrength-reduce -pipe -I/home/builder/pb_work_dir/psa_aiconfig_7.5.4/psa/lib/dist/usr/i
    nclude -I/usr/include/libxml2 -Wno-unused-parameter -fpic -DSHARED_MODULE -I/usr/local/psa/admin/
    include -c mod_evasive20.c
    sh: line 1: gcc-3.4: command not found
    apxs:Break: Command failed with rc=127


    What can I do?

  12. #12
    when I run gcc -v I get the following

    [root@xxxxxx mod_evasive]# gcc -v
    Reading specs from /usr/lib/gcc-lib/i386-redhat-linux/3.2.3/specs
    Configured with: ../configure --prefix=/usr --mandir=/usr/share/man --infodir=/u
    sr/share/info --enable-shared --enable-threads=posix --disable-checking --with-s
    ystem-zlib --enable-__cxa_atexit --host=i386-redhat-linux
    Thread model: posix
    gcc version 3.2.3 20030502 (Red Hat Linux 3.2.3-53)

    so I think I might have gcc installed in different location other than /usr/bin/gcc-3.2.3 am i right?

  13. #13
    Join Date
    Jan 2005
    Location
    Scotland, UK
    Posts
    2,681
    Like I said above

    ls -al /usr/bin | grep -i gcc
    whereis gcc
    Server Management - AdminGeekZ.com
    Infrastructure Management, Web Application Performance, mySQL DBA. System Automation.
    WordPress/Magento Performance, Apache to Nginx Conversion, Varnish Implimentation, DDoS Protection, Custom Nginx Modules
    Check our wordpress varnish plugin. Contact us for quote: sales@admingeekz.com

  14. #14
    Join Date
    Sep 2005
    Posts
    170

    hmm

    Hmm thanks for the tutorial, I really want to install this mod, but I am using windows is there a mod_evasive ported to windows someplace?

  15. #15
    Join Date
    Aug 2004
    Location
    Canada
    Posts
    3,785
    I've used this in the passed and it had got all messed up when I had clients with sites that generated images via php. So say a site with a ton of images that are .php then grab the images in order to prevent hotlinking.

    So anyone who uses it now have you had any issues like this?
    Tony B. - Chief Executive Officer
    Hawk Host Inc. Proudly serving websites since 2004
    Quality Shared and Cloud Hosting
    PHP 5.2.x - PHP 8.1.X Support!

  16. #16
    Join Date
    Feb 2006
    Posts
    68
    Hello

    How to install rules ?

  17. #17
    Join Date
    Dec 2004
    Location
    New York, NY
    Posts
    10,710
    Quote Originally Posted by Mr.Zooka
    Hello

    How to install rules ?
    Rules? What are you referring to?

    There is no such thing as 'rules' for mod_evasive.
    MediaLayer, LLC - www.medialayer.com Learn how we can make your website load faster, translating to better conversion rates for your business!
    The pioneers of optimized web hosting, featuring LiteSpeed Web Server & SSD Storage - Celebrating 10 Years in Business

  18. #18
    What happen please help me :

    rev0042:/ # cd mod_evasive/
    rev0042:/mod_evasive # apxs2 -cia mod_evasive20.c
    /usr/share/apache2/build/libtool --silent --mode=compile gcc -prefer-pic -O2 -fmessage-length=0 -Wall -g -fPIC -Wall -fno-strict-aliasing -D_LARGEFILE_SOURCE -DAP_HAVE_DESIGNATED_INITIALIZER -DLINUX=2 -D_REENTRANT -D_XOPEN_SOURCE=500 -D_BSD_SOURCE -D_SVID_SOURCE -D_GNU_SOURCE -DAP_DEBUG -Wmissing-prototypes -Wstrict-prototypes -Wmissing-declarations -pthread -I/usr/include/apache2 -I/usr/include/apache2 -I/usr/include/apache2 -c -o mod_evasive20.lo mod_evasive20.c && touch mod_evasive20.slo
    mod_evasive20.c: In function `access_checker':
    mod_evasive20.c:212: warning: implicit declaration of function `getpid'
    mod_evasive20.c:212: warning: long int format, different type arg (arg 3)
    mod_evasive20.c: At top level:
    mod_evasive20.c:327: warning: no previous prototype for `ntt_node_create'
    mod_evasive20.c: In function `destroy_hit_list':
    mod_evasive20.c:301: warning: control reaches end of non-void function
    mod_evasive20.c: In function `create_hit_list':
    mod_evasive20.c:118: warning: control reaches end of non-void function
    /usr/share/apache2/build/libtool --silent --mode=link gcc -o mod_evasive20.la -rpath /usr/lib64/apache2 -module -avoid-version mod_evasive20.lo
    /usr/share/apache2/build/instdso.sh SH_LIBTOOL='/usr/share/apache2/build/libtool' mod_evasive20.la /usr/lib64/apache2
    /usr/share/apache2/build/libtool --mode=install cp mod_evasive20.la /usr/lib64/apache2/
    cp .libs/mod_evasive20.so /usr/lib64/apache2/mod_evasive20.so
    cp .libs/mod_evasive20.lai /usr/lib64/apache2/mod_evasive20.la
    cp .libs/mod_evasive20.a /usr/lib64/apache2/mod_evasive20.a
    ranlib /usr/lib64/apache2/mod_evasive20.a
    chmod 644 /usr/lib64/apache2/mod_evasive20.a
    PATH="$PATH:/sbin" ldconfig -n /usr/lib64/apache2
    ----------------------------------------------------------------------
    Libraries have been installed in:
    /usr/lib64/apache2

    If you ever happen to want to link against installed libraries
    in a given directory, LIBDIR, you must either use libtool, and
    specify the full pathname of the library, or use the `-LLIBDIR'
    flag during linking and do at least one of the following:
    - add LIBDIR to the `LD_LIBRARY_PATH' environment variable
    during execution
    - add LIBDIR to the `LD_RUN_PATH' environment variable
    during linking
    - use the `-Wl,--rpath -Wl,LIBDIR' linker flag
    - have your system administrator add LIBDIR to `/etc/ld.so.conf'

    See any operating system documentation about shared libraries for
    more information, such as the ld(1) and ld.so(8) manual pages.
    ----------------------------------------------------------------------
    chmod 755 /usr/lib64/apache2/mod_evasive20.so
    apxs:Error: Config file /etc/apache2/httpd2-prefork.conf not found.

  19. #19
    Join Date
    Sep 2006
    Posts
    33
    nice tpoic and it is cool i was looking for instructions on it it is a great mod if you are facing ddos attacks it saves your from ddos not 100% but almost 50% you can say

  20. #20
    Join Date
    Aug 2007
    Posts
    35

    * How to :

    Help me Please !

    I have Apache 1.3.X .and I do following step :
    cd /usr/local/src
    wget http://www.zdziarski.com/projects/mo..._1.10.1.tar.gz
    tar -zxf mod_evasive_1.10.1.tar.gz
    cd mod_evasive
    /usr/local/apache/bin/apxs -cia mod_evasive.c

    1. How can I find httpd.conf file ?
    2. where is the best place for Past following lines in http.conf ?
    <IfModule mod_evasive.c>
    DOSHashTableSize 3097
    DOSPageCount 5
    DOSSiteCount 100
    DOSPageInterval 2
    DOSSiteInterval 2
    DOSBlockingPeriod 600
    </IfModule>
    Thank You

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •