- Lab
- A Cloud Guru
Configure Mod Evasive
The goal of this lab is to configure the `mod_evasive` module for the Apache Web Server. First, we install and load `mod_evasive`. Its installation includes a default configuration file with values we can modify. One thing to configure is how many times a person can reload our site until they are denied. The conditions of the lab include the following. * firewalld is already running. * SSH is port 61613 which we need to connect to the server. * Apache is running on port 80. * Port 80 is already open. * SELinux is in enforcing mode. * The front end and back end are both up and running. * The back end is running on port 65535.
Path Info
Table of Contents
-
Challenge
Install `mod_evasive`
sudo yum install mod_evasive
-
Challenge
Inform Apache of the New Module
sudo vim /etc/httpd/conf/httpd.conf
Make sure
conf.d/*.conf
is included.Go to
/etc/httpd/conf.d/`` and make sure we have the configuration file for
mod_evasive` and that it has a LoadModule directive. -
Challenge
Reduce `DOSSiteCount`
sudo vim /etc/httpd/conf.d/mod_evasive.conf
Change the value of
DOSSiteCount
from 50 to 30.Save and close
ESC :wq ENTER
-
Challenge
Test the Configuration
Open your browser and navigate to http://Server_IP/index.html.
Refresh the site often in quick succession and confirm the block.
What's a lab?
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Provided environment for hands-on practice
We will provide the credentials and environment necessary for you to practice right within your browser.
Guided walkthrough
Follow along with the author’s guided walkthrough and build something new in your provided environment!
Did you know?
On average, you retain 75% more of your learning if you get time for practice.