hosted by liquidweb


Go Back   Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Is this DOSEvasive Configuration Ok?
Reply

Forum Jump

Is this DOSEvasive Configuration Ok?

Reply Post New Thread In Hosting Security and Technology Subscription
 
Send news tip View All Posts Thread Tools Search this Thread Display Modes
  #1  
Old 11-24-2011, 02:05 PM
person287 person287 is offline
WHT Addict
 
Join Date: Mar 2011
Posts: 138

Is this DOSEvasive Configuration Ok?


Will this configuration protect effectively against DoS (not DDoS really I know), in that it'll block 'bad' people semi-reliably, but at the same time let legitimate users in (I know nothing is flawless).
Code:
<IfModule dosevasive22_module.so>
       DOSHashTableSize    1024
       DOSPageCount        2
       DOSSiteCount        20
       DOSPageInterval     1
       DOSSiteInterval     1
       DOSBlockingPeriod   500
</IfModule>
The site is http://silicoxvalley.com if it makes much difference by the way.

Thanks, Ed

__________________
My Site is Silicox Valley Technology
Follow me on Twitter, @person287



Sponsored Links
  #2  
Old 11-25-2011, 06:04 PM
person287 person287 is offline
WHT Addict
 
Join Date: Mar 2011
Posts: 138
Anybody know?

__________________
My Site is Silicox Valley Technology
Follow me on Twitter, @person287

  #3  
Old 11-26-2011, 10:08 AM
Patrick Patrick is offline
Security Ninja
 
Join Date: Mar 2003
Location: Canada
Posts: 8,614
Truth be told, mod_evasive is very ineffective and doesn't seem to work with newer versions of Apache, or at least ones with FastCGI. In theory the software is supposed to stop a single user from flooding a website or an overly aggressive bot, but in reality, most REAL DoS attacks against a website will not be stopped.

__________________
Patrick William | Rack911 Research Labs | Software Security Auditing
250+ Vulnerabilities Found - Get a quote on a professional audit @ Rack911.com

www.HostingSecList.com - Security notices for the hosting community.

Sponsored Links
  #4  
Old 11-26-2011, 11:57 AM
person287 person287 is offline
WHT Addict
 
Join Date: Mar 2011
Posts: 138
Do you know of any better ones, or is it really just the best of a bad bunch due to limitations of technology?

__________________
My Site is Silicox Valley Technology
Follow me on Twitter, @person287

  #5  
Old 11-26-2011, 01:53 PM
Patrick Patrick is offline
Security Ninja
 
Join Date: Mar 2003
Location: Canada
Posts: 8,614
Quote:
Originally Posted by person287 View Post
Do you know of any better ones, or is it really just the best of a bad bunch due to limitations of technology?
I've also been searching for something better that works with Apache to no avail. Some providers have switched to LiteSpeed and Nginx due to their smaller footprint; They tend to handle DoS attacks much, much better than Apache:

http://litespeedtech.com/
http://nginx.org/

__________________
Patrick William | Rack911 Research Labs | Software Security Auditing
250+ Vulnerabilities Found - Get a quote on a professional audit @ Rack911.com

www.HostingSecList.com - Security notices for the hosting community.

Reply

Similar Threads
Thread Thread Starter Forum Replies Last Post
What configuration is better madrigueragdl Dedicated Server 21 08-02-2010 02:49 PM
I could use a little help with configuration Tigiot VPS Hosting 7 08-15-2009 12:05 AM
Which configuration is better? dotcomUNDERGROUND Dedicated Server 7 11-29-2006 04:58 AM
dosevasive- how to detect/ unblock certain IPs? GeorgeC Hosting Security and Technology 7 02-17-2005 11:04 PM

Related posts from TheWhir.com
Title Type Date Posted
RackHigh Launches Saudi Arabia Private Cloud Solutions Web Hosting News 2013-08-14 15:40:47
Windows Azure SSL Slip-up Brings SSL Checker Tools Business Blog 2013-02-26 12:25:08
GlobalSign Launches Free SSL Configuration Checker to Improve Site Performance, Security Web Hosting News 2012-11-15 11:09:45
Web Host Rackspace Adds FreeBSD 9, CentOS 6.3 Support to Cloud Servers Web Hosting News 2012-07-30 12:47:10
HP Adds Auto-Discovery Capabilities with Configuration Management System 10 Web Hosting News 2012-07-23 14:47:05


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Postbit Selector

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Forum Jump
Login:
Log in with your username and password
Username:
Password:



Forgot Password?
Advertisement:
Web Hosting News:



 

X

Welcome to WebHostingTalk.com

Create your username to jump into the discussion!

WebHostingTalk.com is the largest, most influentual web hosting community on the Internet. Join us by filling in the form below.


(4 digit year)

Already a member?