mod_security configuration file

Started by rupindo, July 15, 2020, 07:51:46 AM

Previous topic - Next topic

rupindo

First i would like to THANK YOU for this website. It's very well done and all modules works well so far

Anyway, i have problem with evasive2_module. I know you don't like it (read from other forum), but this is very important mod.

Can you help me, after install and running well, some Ip got DOS blocked.

Now, i want to WHITELIST that IP.

I have to include new line of "DOSWhitelist   101.100.182.149" in "httpd.conf" then RESTART SERVER

The RESTART PART is IMPOSSIBLE everytime we need to whitelist IP.

So where is this module CONFIGURATION FILE that we can WHITELIST in .conf file without have to RESTART SERVER?

Can you help us to locate the correct .conf location and filename, and the settings inside .conf

If that's not possible, is there a way we can override/supercede the IP BLACKLIST in .htaccess instead ?

Imagine if an IP got blocked, and we have to RESTART the SERVER in order to let the IP able to access again.

THANK YOU for the help

mario

That mod_evasive doesn't allow to use .htaccess. So your only chance is to restart the server.

rupindo

I read from other source, there is configuration file for mod_evasive module, like evasive.conf or mod_evasive.conf (https://phoenixnap.com/kb/apache-mod-evasive). We can put all whitelist IPs in that configuration file. So where can we put that configuration file at , and whats the correct file name? Thanks

Gregg

You can name the file anything you want and just Include it in httpd.conf.

If you need to whitelist IPs often and cannot afford a graceful restart every time, then you probably shouldn't be using the module.