0

am using apache 2.4.9 latest with windows 7 i am using some modules like

limitipconn_module 
security2_module

but using wireshark i get unlimited request to busy my webserver (DOS) from some ip address i have deny them and their ip ranges basicly on isp hostname but using proxies would be a new problem and i can not deny all ip address so other clients can not visit my website

is there any method to block only ip address after 50 request per 10 seconds ? i have seen

mod_evasive 

but it is not compatible with apache 2.4.9 or any idea for using firewall ?

1

You could do a policy based QoS, this allows you to perform rate limiting on particular IP addresses based on a particular policy. This way, you can allow IP addresses to visit your side, but when they perform a particular action (accessing a certain port, accessing a particular URL...), you'll only allow a limited number of sessions.

It will limit the resources your server allocates to them. It may be a good thing to look at potential "DoS" protection from your ISP, but that depends on yours and their definition of DoS. This could be just the "noise" of the Internet.

Also, the ApacheHaus has Mod_evasive for Apache 2.4 on windows, this should allow you to put in some rate limiting as well.

1
  • ijust resloved the problem yesterday by calling firewall from mod_evasive and i just arrived to install mo_evasive 2.4 i downloaded 2.2 i have not seen 2.4 ! thanks for your support
    – K3rnel31
    Jul 9 '14 at 13:54
0

There are lots of solutions which vary in their sophistication and effort / price... you can refer to this article for some simple techniques: http://www.cisco.com/c/en/us/support/docs/security-vpn/kerberos/13634-newsflash.html

There are of course paid of the shelf solutions including cloud based solutions so you dont have to do much on your side such as from Incapsula, Akamai and others...

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.