summaryrefslogtreecommitdiff
path: root/www/mod_evasive/pkg-descr
diff options
context:
space:
mode:
Diffstat (limited to 'www/mod_evasive/pkg-descr')
-rw-r--r--www/mod_evasive/pkg-descr30
1 files changed, 0 insertions, 30 deletions
diff --git a/www/mod_evasive/pkg-descr b/www/mod_evasive/pkg-descr
deleted file mode 100644
index 338260dae53f..000000000000
--- a/www/mod_evasive/pkg-descr
+++ /dev/null
@@ -1,30 +0,0 @@
-mod_dosevasive is an evasive maneuvers module for Apache to provide evasive
-action in the event of an HTTP DoS or DDoS attack or brute force attack.
-It is also designed to be a detection and network management tool, and can be
-easily configured to talk to ipchains, firewalls, routers, and etcetera.
-mod_dosevasive presently reports abuses via email and syslog facilities.
-
-Detection is performed by creating an internal dynamic hash table of IP
-Addresses and URIs, and denying any single IP address from any of the
-following:
-
- * Requesting the same page more than a few times per second
- * Making more than 50 concurrent requests on the same child per second
- * Making any requests while temporarily blacklisted (on a blocking list)
-
-This method has worked well in both single-server script attacks as well as
-distributed attacks, but just like other evasive tools, is only as useful to
-the point of bandwidth and processor consumption (e.g. the amount of bandwidth
-and processor required to receive/process/respond to invalid requests), which
-is why it's a good idea to integrate this with your firewalls and routers for
-maximum protection.
-
-This module instantiates for each listener individually, and therefore has a
-built-in cleanup mechanism and scaling capabilities. Because of this per-child
-design, legitimate requests are never compromised (even from proxies and NAT
-addresses) but only scripted attacks. Even a user repeatedly clicking on
-'reload' should not be affected unless they do it maliciously. mod_dosevasive
-is fully tweakable through the Apache configuration file, easy to incorporate
-into your web server, and easy to use.
-
-WWW: http://www.nuclearelephant.com/projects/dosevasive/