Apache DOS 보호 모듈 mod_evasive

Apache Evasive Maneuvers Module

 

APACHE v1.3
-----------

AddModule	mod_evasive.c

APACHE v2.0
-----------

LoadModule evasive20_module modules/mod_evasive20.so

APACHE v1.3
-----------

<IfModule mod_evasive.c>
    DOSHashTableSize    3097
    DOSPageCount        2
    DOSSiteCount        50
    DOSPageInterval     1
    DOSSiteInterval     1
    DOSBlockingPeriod   10
</IfModule>

APACHE v2.0
-----------
<IfModule mod_evasive20.c>
    DOSHashTableSize    3097
    DOSPageCount        2
    DOSSiteCount        50
    DOSPageInterval     1
    DOSSiteInterval     1
    DOSBlockingPeriod   10
</IfModule>

- DOSPageCount : 같은 페이지( or URI) 요청수 임계값

- DOSSiteCount :  총 요청수 임계값

- DOSPageInterval : 페이지 수 임계값 간격 ( 기본값 1초)

- DOSSiteInterval : 사이트 수 임계값 간격 ( 기본값 1초)

- DOSBlockingPeriod : 차단 기간

 

Optionally you can also add the following directives:

    DOSEmailNotify	you@yourdomain.com
    DOSSystemCommand	"su - someuser -c '/sbin/... %s ...'"
    DOSLogDir		"/var/lock/mod_evasive"

 

To whitelist an address (or range) add an entry to the Apache configuration 
in the following fashion:

DOSWhitelist	127.0.0.1
DOSWhitelist	127.0.0.*