./security/ap24-evasive, Apache Evasive Maneuvers Module

[ Image CVSweb ] [ Image Homepage ] [ Image RSS ] [ Image Required by ]

Branch: CURRENT, Version: 2.4.0nb1, Package name: ap24-evasive-2.4.0nb1, Maintainer: jschauma

mod_evasive is an evasive maneuvers module for Apache
to provide evasive action in the event of an HTTP DoS
or DDoS attack or brute force attack. It is also
designed to be a detection tool, and can be easily
configured to talk to ipchains, firewalls, routers,
and etcetera.

Detection is performed by creating an internal dynamic
hash table of IP Addresses and URIs, and denying any
single IP address from any of the following:

* Requesting the same page more than a few times per
second

* Making more than 50 concurrent requests on the same
child per second

* Making any requests while temporarily blacklisted
(on a blocking list)

Master sites:

Filesize: 99.332 KB

Version history: (Expand)

CVS history: (Expand)


   2026-05-05 12:19:43 by Thomas Merkel | Files touched by this commit (2) 
Log message:
ap24-evasive: fix SunOS build
   2025-10-23 22:40:24 by Thomas Klausner | Files touched by this commit (2999) 
Log message:
*: recursive bump for pcre2

Running an old binary against the new pcre doesn't work:
/usr/pkg/lib/libpcre2-8.so.0: version PCRE2_10.47 required by \ 
/usr/pkg/lib/libglib-2.0.so.0 not defined
   2025-09-30 18:07:40 by Thomas Klausner | Files touched by this commit (50) 
Log message:
*: use ${DESTDIR}${PREFIX} instead of ${DESTDIR}/${PREFIX}
   2025-05-30 19:31:49 by Jan Schaumann | Files touched by this commit (6) 
Log message:
add mod_evasive

mod_evasive is an evasive maneuvers module for Apache
to provide evasive action in the event of an HTTP DoS
or DDoS attack or brute force attack. It is also
designed to be a detection tool, and can be easily
configured to talk to ipchains, firewalls, routers,
and etcetera.

Detection is performed by creating an internal dynamic
hash table of IP Addresses and URIs, and denying any
single IP address from any of the following:

* Requesting the same page more than a few times per
  second

* Making more than 50 concurrent requests on the same
  child per second

* Making any requests while temporarily blacklisted
  (on a blocking list)