Let us look at how to Configure mod_evasive with the support of our Apache hosting support at Bobcares.

What is mod_evasive?

mod_evasive is an Apache module that aids in server defense against brute force and denial of service assaults. Setting up mod_evasive provides us with a safety net to capture malicious players before they degrade server performance.

The module has numerous configuration settings that allow us to specify how many concurrent queries a client may make in a certain interval. After the limit is reached, more requests will be prevented for a period of time.

How to configure and Install mod_evasive to protect Against DoS and DDoS:?

The methods for installing mod_evasive to guard against DOS and DDOS are as follows.

1. Requirements to Configure mod_evasive:

   Firstly, We must install the requirements. Run the following command on the terminal.

   For Debian/Ubuntu follow the command given below:

   sudo apt-get updateCopy Code

   sudo apt-get install apache2-utilsCopy Code

   For CentOS / Fedora:

   sudo yum updateCopy Code

   sudo yum install httpd-develCopy Code

2. Install mod_evasive:

   To install mod_evasive, use the following command.

   For Debian / Ubuntu:

   sudo apt-get install libapache2-mod-evasiveCopy Code

   For CentOS / Fedora:

   sudo yum install mod_evasiveCopy Code

3. Configure mod_evasive:

   After that, in a text editor, open the mod_evasive configuration file.

   For Debian/Ubuntu:

   sudo vi /etc/apache2/mods-enabled/evasive.confCopy Code

   CentOS / Fedora:

   sudo vi /etc/httpd/conf.d/mod_evasive.confCopy Code

   In a text editor, open the mod_evasive configuration file.

   DOSHashTableSize 3097
   DOSPageCount 2
   DOSSiteCount 50
   DOSPageInterval 1
   DOSSiteInterval 1
   DOSBlockingPeriod 10
   DOSEmailNotify mail@yourdomain.com
   DOSLogDir "/var/log/apache2/"Copy Code

   Change the email against DOSEmailNotify to the email id so that we are alerted automatically if the website is attacked.

4. Restart Apache Server:

   To make the modifications take effect, restart the Apache web server.

   For Debian / Ubuntu:

   sudo systemctl reload apache2Copy Code

   For CentOS / Fedora:

   sudo systemctl restart httpd.serviceCopy Code

5. Check to see whether mod_evasive is working:

   Finally, Mod_evasive’s creators have given a test.pl script for testing. It will be held at:

   /usr/share/doc/libapache2-mod-evasive/examples/test.plCopy Code

   Use the following command to run the script:

   perl /usr/share/doc/libapache2-mod-evasive/examples/test.plCopy Code

   The output should look like this:

   HTTP/1.1 403 Forbidden
   HTTP/1.1 403 Forbidden
   HTTP/1.1 403 Forbidden
   HTTP/1.1 403 Forbidden
   HTTP/1.1 403 Forbidden
   HTTP/1.1 403 ForbiddenCopy Code

test.pl simply mimics a web server security attack and returns the result. The 403 response code in the preceding lines indicates that access to harmful request patterns has been blocked.

[Need assistance with similar queries? We are here to help]

Conclusion

To sum up we have now seen how to configure mod_evasive with the support of our tech support team.