[wahyuardan]

mod_evasive is an evasive maneuvers module for Apache to provide evasive action in the event of an HTTP DoS or DDoS attack or brute force attack. It is also designed to be a detection and network management tool, and can be easily configured to talk to ipchains, firewalls, routers, and etcetera. mod_evasive presently reports abuses via email and syslog facilities.

-Saya sarankan untuk menginstall mod_security dulu

Cara install mod_evasive & configurasinya

Code:

apt-get install libapache2-mod-evasive

Lalu buat direktori untuk log mod-evasive + di chown ke www-data

Code:

mkdir /var/log/mod_evasive
chown www-data:www-data /var/log/mod_evasive/

untuk konfigurasinya buat file di /etc/apache2/mods-available/mod-evasive.conf

Code:

nano /etc/apache2/mods-available/mod-evasive.conf

isinya file /etc/apache2/mods-available/mod-evasive.conf

Code:

<ifmodule mod_evasive20.c>
   DOSHashTableSize 3097
   DOSPageCount  2
   DOSSiteCount  50
   DOSPageInterval 1
   DOSSiteInterval  1
   DOSBlockingPeriod  10
   DOSLogDir   /var/log/mod_evasive
   DOSEmailNotify  [email protected]
   DOSWhitelist   127.0.0.1
</ifmodule>

ganti sesuai keinginan anda

check atau enable mod_evasive dengan cara + restart apache

Code:

a2enmod mod-evasive
service apache2 restart

Sekian terima-kasih, Semoga bermanfaat