The Apache Haus Forum

Forum Topics => Third-party Modules => Topic started by: rupindo on July 15, 2020, 07:51:46 AM

Title: mod_security configuration file
Post by: rupindo on July 15, 2020, 07:51:46 AM
First i would like to THANK YOU for this website. It's very well done and all modules works well so far

Anyway, i have problem with evasive2_module. I know you don't like it (read from other forum), but this is very important mod.

Can you help me, after install and running well, some Ip got DOS blocked.

Now, i want to WHITELIST that IP.

I have to include new line of "DOSWhitelist   101.100.182.149" in "httpd.conf" then RESTART SERVER

The RESTART PART is IMPOSSIBLE everytime we need to whitelist IP.

So where is this module CONFIGURATION FILE that we can WHITELIST in .conf file without have to RESTART SERVER?

Can you help us to locate the correct .conf location and filename, and the settings inside .conf

If that's not possible, is there a way we can override/supercede the IP BLACKLIST in .htaccess instead ?

Imagine if an IP got blocked, and we have to RESTART the SERVER in order to let the IP able to access again.

THANK YOU for the help
Title: Re: mod_security configuration file
Post by: mario on July 15, 2020, 09:10:07 AM
That mod_evasive doesn't allow to use .htaccess. So your only chance is to restart the server.
Title: Re: mod_security configuration file
Post by: rupindo on July 16, 2020, 12:39:58 PM
I read from other source, there is configuration file for mod_evasive module, like evasive.conf or mod_evasive.conf (https://phoenixnap.com/kb/apache-mod-evasive). We can put all whitelist IPs in that configuration file. So where can we put that configuration file at , and whats the correct file name? Thanks
Title: Re: mod_security configuration file
Post by: Gregg on July 17, 2020, 09:42:14 PM
You can name the file anything you want and just Include (http://httpd.apache.org/docs/2.4/mod/core.html#include) it in httpd.conf.

If you need to whitelist IPs often and cannot afford a graceful restart every time, then you probably shouldn't be using the module.