Mod evasive

Bloqueando ataques DDos no apache com mod_evasive

apt-get install apache2-prefork-dev
cd /usr/local/src
wget -c http://pub.quijaua.com.br/apache2/mod_evasive_1.10.1.tar.gz
wget http://pub.quijaua.com.br/apache2/evasive
wget http://pub.quijaua.com.br/apache2/evasive.load
mv evasive /etc/apache2/conf.d
mv evasive.load /etc/apache2/mods-available
tar zxvf mod_evasive_1.10.1.tar.gz
cd mod_evasive
sed -i "s/bin\/mail/usr\/bin\/mail/g" mod_evasive20.c
/usr/bin/apxs2 -i -c mod_evasive20.c
a2enmod evasive
/etc/init.d/apache2 force-reload

opt: para receber notificação por email, acrescente em /etc/apache2/conf.d/evasive:

DOSEmailNotify seu@examplomail.com

ou para guarda log:

DOSLogDir           "/var/lock/mod_evasive"

crie a pasta

# mkdir /var/lock/mod_evasive

referências:

• http://www.zdziarski.com/projects/mod_evasive/mod_evasive_1.10.1.tar.gz
• http://advosys.ca/viewpoints/2006/08/installing-mod_evasive-in-ubuntu/
• http://www.gforum.tv/board/1124/270275/instalar-o-mod_evasive.html
• http://www.megawebservice.com.br/cliente/knowledgebase.php?action=displayarticle&catid=2&id=14