Knowledgebase

Update On: 23 Jul 2021install mod_evasive on cpanel server

mod_evasive is an obscure movements module for Apache to produce evasive action in the event of an HTTP DoS or DDoS charge or brute force fit. It is also planned to be a disclosure and network administration tool and can be simply configured to speak to ipchains, firewalls, routers, and etcetera. mod_evasive directly records damages via email and Syslog abilities.

Detection is played by generating an inner effective hash table of IP Numbers and URIs, and rejecting any single IP address from any of the following:
Begging the related page more than a few points per second
Offering more than 50 cooperative applications on the similar child per second
Getting any requests while momentarily blacklisted (on a blocking list)
This system has worked well in both single-server script fits as well as classified attacks, but just like other evasive vehicles, is only as valuable to the point of bandwidth and processor consumption (e.g. the cost of bandwidth and processor wanted to receive/method/respond to invalid requests), which is why it’s a good idea to mix this with your firewalls and routers for highest protection.

How to install mod_evasive on cpanel server?

# cd /usr/local/src/
# wget http://www.zdziarski.com/blog/wp-content/uploads/2010/02/mod_evasive_1.10.1.tar.gz
# tar -xvzf mod_evasive_1.10.1.tar.gz
# cd mod_evasive/
# /usr/local/apache/bin/apxs -cia mod_evasive20.c

After install the following details display

chmod 755 /usr/local/apache/modules/mod_evasive20.so
[activating module `evasive20′ in /usr/local/apache/conf/httpd.conf]

open your httpd.conf file and update mod_evasive20.so

vi /usr/local/apache/conf/httpd.conf

LoadModule evasive20_module   modules/mod_evasive20.so

DOSHashTableSize    3097
DOSPageCount        2
DOSSiteCount        50
DOSPageInterval     1
DOSSiteInterval     1
DOSBlockingPeriod   10

restart your apache configuration now.

/etc/init.d/httpd restart