Stop HTTP DOS Attack

This is a simple external module, originally coded for linux apache 2.2, which is compiled for windows (apache 2.2) and help stop DOS attack with webserver.

Steps:

1. Download the attached file and extract it inside your webserver module folder. (xampp\apache\modules)
2. Load the module with the following code, add in httpd.conf:

Code:

---

LoadModule dosevasive22_module modules/mod_dosevasive22.dll

<IfModule dosevasive22_module>
DOSPageCount 2
DOSPageInterval 1
DOSBlockingPeriod 10
DOSSiteCount 50
DOSSiteInterval 1
</IfModule>

---

* This setting means a 2x connection (same page) or 50x connection (whole website) in 1 sec will be temporarily blocked for 10 sec. and your webserver will return forbidden error to the attacker.

3. Restart your webserver.

* You can see the possible attacks in the error.log. (xampp\apache\logs\)

thanks for this. i might use this when my server is up.

work on app 2.5.10 ?
and where exacly to put in htp.conf this ot doesn`t matter ?

It is compiled for apache 2.2x and as far as I know 2.2 series is the latest there is. 'httpd.conf' is the main configuration of apache, usually resided inside conf folder.

i know where is the file. I was thinking in the file does hav matter where exacli to put the Text ?

And Can you do this fo 2.5 Series :D it`s better :glare:

You can find some loadmodule code inside the conf file, you can put it just after the last loadmodule code in httpd.conf. So where you get exactly your 2.5 apache?

Quote:

---

Originally Posted by phit666

You can find some loadmodule code inside the conf file, you can put it just after the last loadmodule code in httpd.conf. So where you get exactly your 2.5 apache?

---

http://www.appservnetwork.com/module...article&sid=46
just google.bg :D

doh that is appserv version 2.5 not apache doh...

AppServ 2.5.10

* Apache 2.2.8
* PHP 5.2.6
* MySQL 5.0.51b
* phpMyAdmin-2.10.3

do not drink and drive ... read and read

EDIT: prove that this works? why can i trust this?

Here, visit this page then press F5 continuesly (make it fast) like 5 times and look at the page that will appear.
http://***/

this doesnt stop a real dos attack, becuase i would be attacking your pc hardware directly not your shitty web server. great job to maybe stop the noobs, but for the pro's, which outnumber the noobs, your screwed.

When i add this dll and mode, after 30min i have crash all windowse programs, dude not good. Example Explorer Debug error, Destope stuck, can't turn on windows task manager, when open him 5sec, and also debug error, so yeah cool protection from HTTP DOS (maybe) but will also stop all windowse :D

Quote:

---

Originally Posted by c4cadvisor

this doesnt stop a real dos attack, becuase i would be attacking your pc hardware directly not your shitty web server. great job to maybe stop the noobs, but for the pro's, which outnumber the noobs, your screwed.

---

yea i test it and for me don`t works :ehh::glare:

Quote:

---

Originally Posted by c4cadvisor

this doesnt stop a real dos attack, becuase i would be attacking your pc hardware directly not your shitty web server. great job to maybe stop the noobs, but for the pro's, which outnumber the noobs, your screwed.

---

I clearly stated HTTP and ok go ahead PRO attack a server where only 80 tcp port is open :).

anyone using this without windows problem?

work perfect