Re: Performance Issues and DOS attacksI can't imagine a good enough reason why anyone would want to do this to Xoops.Org
I sincerely hope that legal action be taken against the individual responsible.
I am certain that the community will be behind any actions that Xoops.Org will undertake.
Regards.
Re: Performance Issues and DOS attacksWell, Xoops.org should have installed GIJOE's Anti-DoS.... Don't you think so?
Re: Performance Issues and DOS attacksThese worked at a lower level than GIJOE's patch protects against. We are currently exploring options to prevent such an attack from happening again.
Re: Performance Issues and DOS attacksAntiDoS-P is not a patch but a module.
This module does not replace the core files at all.
By the way, if 'ban IP' can't help this site, the next measure is registering .htacess as deny IP, I think.
Re: Performance Issues and DOS attacksMay I suggest that you install mod_dosevasive...
You can download it here:
http://www.apachetoolbox.com/data/cvs/src/mod_dosevasive.tar.gz
WHAT IS MOD_DOSEVASIVE ?
mod_dosevasive is an evasive maneuvers module for Apache to provide evasive
action in the event of an HTTP DoS or DDoS attack or brute force attack. It
is also designed to be a detection tool, and can be easily configured to talk
to ipchains, firewalls, routers, and etcetera.
Detection is performed by creating an internal dynamic hash table of IP
Addresses and URIs, and denying any single IP address from any of the following:
- Requesting the same page more than a few times per second
- Making more than 50 concurrent requests on the same child per second
- Making any requests while temporarily blacklisted (on a blocking list)
This method has worked well in both single-server script attacks as well
as distributed attacks, but just like other evasive tools, is only as
useful to the point of bandwidth and processor consumption (e.g. the
amount of bandwidth and processor required to receive/process/respond
to invalid requests), which is why it's a good idea to integrate this
with your firewalls and routers.
This module instantiates for each listener individually, and therefore has
a built-in cleanup mechanism and scaling capabilities. Because of this,
legitimate requests are never compromised but only scripted attacks. Even
a user repeatedly clicking on 'reload' should not be affected unless they do
it maliciously.
You can install it seperately or part of apachetoolbox!!
Re: Performance Issues and DOS attacksIts been a while since I've read up on apachetoolbox, are they still targeted for apache 1.x.x or have they been ported to 2.x.x ?
It sounds like an interesting enought tool. Are you implementing it?
Re: Performance Issues and DOS attacksYa I'm running apache 1.X series .. not up to the 2.0 yet..
The module DOES SUPPORT APACHE 2!!
The module isn't from apachetoolbox... its from here:
http://www.nuclearelephant.com/projects/dosevasive/
| Stats | |
| Goal: | $100.00 |
| Due Date: | Nov 30 |
| Gross Amount: | $0.00 |
| Net Balance: | $0.00 |
| Left to go: | $100.00 |
 |
|
