Arch Linux

laegnur

Member

Registered: 2013-07-23

Posts: 12

Apache HTTP and mod_security and mod_evasive

Hello

I followed a course on setting up a server (web server, mail server, ssh server,... ) using Debian OS.

When the teacher explained how to install and configure Apache, she install these two mods, mod_security and mod_evasive, to prevent DDoS attacks on the server.

I want to set a server with Arch Linux, but I see no package, not in Packages not in Aur, with these mods.

Anyone knows how to properly install them in Apache in Arch Linux?

These mods are excluded from Arch for some reason?

qwertzlbert

Member

From: Germany

Registered: 2015-10-18

Posts: 17

Re: Apache HTTP and mod_security and mod_evasive

Hello

I've got exactly the same question and also found no answer after massive searching.
Have you allready found an answer to that or some other method to prevent such attacks?

--qwertzlbert

byte

Member

From: Düsseldorf (DE)

Registered: 2006-05-01

Posts: 2,046

Re: Apache HTTP and mod_security and mod_evasive

There's https://aur.archlinux.org/packages/modsecurity/ ... although the PKGBUILD doesn't look very polished.

---

1000

qwertzlbert

Member

From: Germany

Registered: 2015-10-18

Posts: 17

Re: Apache HTTP and mod_security and mod_evasive

Thank you for the link!

Actually I'm more curious about the evasive modul, does anybody know why it's not provided in the AUR? Does it do the same as set iptable rules accordingly?

Last edited by qwertzlbert (2015-10-20 17:39:57)

laegnur

Member

Registered: 2013-07-23

Posts: 12

Re: Apache HTTP and mod_security and mod_evasive

Hello

Sorry for not answer before. I saw last week that mod_security2 is back, and I installed it.

For the mod_evasive I followed that video, is old, but it still working (I only followed the steps for mod_evasive).

https://www.youtube.com/watch?v=HHiJ5qIYi0k

I added this fix too before compiled it

https://mbrownnyc.wordpress.com/technol … che-2-4-x/