Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Hosting Security and Technology Tutorials : HOWTO: Limit Ip connections

[Blueheaven]

Installing mod_limitipconn.c
http://dominia.org/djao/

Intro
============
This is the distribution page for the Apache module mod_limitipconn.c, which
allows web server administrators to limit the number of simultaneous downloads
permitted from a single IP address.

Why did I write this module? Well, I run an mp3 server which since its
inception was being constantly hosed by people who were trying to download
dozens of files at once. For months I scoured the Internet looking for a code
snippet that would solve this problem. The closest thing I found was this patch
against an old version of Apache, and it didn't run properly on my Linux box
(that was back then; nowadays, the patch doesn't even apply cleanly to the
Apache source tree).

Finally I gave up and decided to write something to do the job myself, and
here's the result.
=================
Log into ssh

cd /usr/src
wget http://dominia.org/djao/limit/mod_li...nn-0.04.tar.gz
tar xzvf mod_limitipconn-0.04.tar.gz
cd mod_limitipconn-0.04

pico Makefile
find the line that reads APXS=apxs[/b]
change that to
APXS=/usr/local/apache/bin/apxs

press cntrl O to save
then cntrl X

// if your locations to apxs is different
locate apxs and copy the path
then paste that in
//

make
make install

service httpd restart

pico -w /etc/httpd/conf/httpd.conf

locate ExtendedStatus
Make sure ExtendedStatus is on and without the comment at the start

and add this line to every virtual directory you want to limit
or add it once to the main directory to limit all

<IfModule mod_limitipconn.c>
<Location /somewhere>
MaxConnPerIP 3
# exempting images from the connection limit is often a good
# idea if your web page has lots of inline images, since these
# pages often generate a flurry of concurrent image requests
NoIPLimit image/*
</Location>

<Location /mp3>
MaxConnPerIP 1
# In this case, all MIME types other than audio/mpeg and video*
# are exempt from the limit check
OnlyIPLimit audio/mpeg video
</Location>
</IfModule>

press cntrl O to save
then cntrl X
then service httpd restart

[smtalk]

Thats great.

[Flipe.NET]

Very good.
Someday i ll need to use it.
Tnks

[beniceman]

i have followed all of the instructions above but it still did not work.

I did change the location /somewhere to the directory I want to limit

Any ideas to correct that? please help

[Blueheaven]

I've only managed to get it working under each seperate virtual host and in that I have something like this.

<IfModule mod_limitipconn.c>
<Location />
MaxConnPerIP 3
NoIPLimit image/*
</Location>
</IfModule>

hope that helps

[Blue Eyes]

Thanks man.

I have had similar problems lately. This should do the trick.

Good luck.

[filuren]

I got ERROR 404 when downloading. Can you update the latest? Thanks!

[/usr/src]# wget http://dominia.org/djao/limit/mod_l...onn-0.04.tar.gz
--01:24:31-- http://dominia.org/djao/limit/mod_l...onn-0.04.tar.gz
=> `mod_l...onn-0.04.tar.gz'
Resolving dominia.org... done.
Connecting to dominia.org[18.208.0.43]:80... connected.
HTTP request sent, awaiting response... 404 Not Found
01:24:31 ERROR 404: Not Found.

[Blueheaven]

The creator david, has updated the link, (not me)http://dominia.org/djao/limit/contri..._limitipconn.c

I dont think this will come out as a full url so right mouse click copy shortcut and then

wget url

[filuren]

how is the setting i should use to limit zip files download? most of my sites anime and video files are in zipped.

[hostchamp]

Someday i ll need to use it.
Thanks

[superprogram]

Blueheaven, that really looks great
What is the logic you are using here?

[justbenice]

i cant make it work with my wma and wmv files

[justbenice]

ok , do this trick
<IfModule mod_limitipconn.c>
<Location />
MaxConnPerIP 3
NoIPLimit image/*
</Location>
</IfModule>
and i got this work . Very cool apache mod .

[justbenice]

And after 2 day of using this mod , i found out a very very big problem . Some users who have same ip class and netmask like aol will be all limit at 3 connection . Anyway we can fix this ?

[Blueheaven]

what percentage of people are on aol?

Limiting ip's seems to be really only good if you have tons of traffic, like if you have too much traffic, that it slows your webpages down.

for example if I don't use this mod, my webpages takes 10* longer to load