dosevasive and 403 errors

[StingRay]

Lately I have been getting complaints of 403 errors. but it was pretty random.
Then yesterday i finally saw it myself.

I Tracked down the problem to mod_dosevasive. Disabling it resolves the problem, however I do not know why it is suddenly a problem (I'm not alone).

For now i shall leave it disabled, as i do not get a lot of DOS attacks, and the one attack i did get, the program was ineffective anyhow.


Thead on cpanel here
http://forums.cpanel.net/showthread.php?t=41165

[aridha]

thanks for this info.

and could you please tell me how to disable it or where to find it.

[StingRay]

thanks for this info.

and could you please tell me how to disable it or where to find it.


Look for it in your http.conf file, just comment the appropriate lines out.
Then restart apache.

[ozgreg]

Look for it in your http.conf file, just comment the appropriate lines out.
Then restart apache.

You will be surprised just how many DDOS probes you can get and I would really strongly recommend having it turned on..

Run the perl test.pl file to make sure the module is working and also check your error_log file as all 403 get piped into the error_log..

Remember you can also change the settings / number of connections that trigger the 403 although any single ip address with > 50 connections usually is not a good thing..