The Apache Haus Forum

Advanced search  

News:

Welcome to Apache Haus Distribution Forum

Pages: [1]   Go Down

Author Topic: mod_security configuration file  (Read 355 times)

rupindo

  • Newbie
  • *
  • Offline Offline
  • Posts: 2
mod_security configuration file
« on: July 15, 2020, 07:51:46 AM »

First i would like to THANK YOU for this website. It's very well done and all modules works well so far

Anyway, i have problem with evasive2_module. I know you don't like it (read from other forum), but this is very important mod.

Can you help me, after install and running well, some Ip got DOS blocked.

Now, i want to WHITELIST that IP.

I have to include new line of "DOSWhitelist   101.100.182.149" in "httpd.conf" then RESTART SERVER

The RESTART PART is IMPOSSIBLE everytime we need to whitelist IP.

So where is this module CONFIGURATION FILE that we can WHITELIST in .conf file without have to RESTART SERVER?

Can you help us to locate the correct .conf location and filename, and the settings inside .conf

If that's not possible, is there a way we can override/supercede the IP BLACKLIST in .htaccess instead ?

Imagine if an IP got blocked, and we have to RESTART the SERVER in order to let the IP able to access again.

THANK YOU for the help
Logged

mario

  • Administrator
  • Member Elite
  • *****
  • Offline Offline
  • Posts: 605
Re: mod_security configuration file
« Reply #1 on: July 15, 2020, 09:10:07 AM »

That mod_evasive doesn't allow to use .htaccess. So your only chance is to restart the server.
Logged

rupindo

  • Newbie
  • *
  • Offline Offline
  • Posts: 2
Re: mod_security configuration file
« Reply #2 on: July 16, 2020, 12:39:58 PM »

I read from other source, there is configuration file for mod_evasive module, like evasive.conf or mod_evasive.conf (https://phoenixnap.com/kb/apache-mod-evasive). We can put all whitelist IPs in that configuration file. So where can we put that configuration file at , and whats the correct file name? Thanks
Logged

Gregg

  • Administrator
  • Member Elite
  • *****
  • Offline Offline
  • Posts: 872
Re: mod_security configuration file
« Reply #3 on: July 17, 2020, 09:42:14 PM »

You can name the file anything you want and just Include it in httpd.conf.

If you need to whitelist IPs often and cannot afford a graceful restart every time, then you probably shouldn't be using the module.
Logged
Pages: [1]   Go Up
 

Sitemap 1 2 3 4 5 6 7 8 9 10 11 12 13