Its always nice to have extra security surounding the architecture and apps, but for that we will need extra resources that we currently dont have right now, i personally would like to have extra RAM on the proxies. mod_security, is not that light, but its really nice and handy :)
<br><br>Tweaks that we should do right now, is verify the values in MaxClients and everything regarding the threads (childs), and see if unecessary modules are being loaded or not<br><br>At least is my opinion...<br>Paulo
<br><br><div><span class="gmail_quote">On 5/27/07, <b class="gmail_sendername">Damian Myerscough</b> <<a href="mailto:damian.myerscough@gmail.com">damian.myerscough@gmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Yea, it would. However mod_easvie is able to detect if users a<br>continuously hitting refresh<br>to consume bandwidth.<br><br>mod_evasive is also recommended by Ryan Barnett who is the author of<br>Preventing Web Attacks with Apache.
<br><br>Has anyone also thought about deploying mod_security? or is it me just<br>being paranoid.<br><br>I think this would make an excellent topic to talk about in the next meeting?<br><br>On 27/05/07, Mike McGrath <<a href="mailto:mmcgrath@redhat.com">
mmcgrath@redhat.com</a>> wrote:<br>> Damian Myerscough wrote:<br>> > Ok, I guess we can talk more about it after the release of Fedora 7.<br>> ><br>> I also have a question about mod_evasive. Wouldn't it be better/most
<br>> efficient to limit that traffic before it even hits the apache instance?<br>><br>> -Mike<br>><br>> _______________________________________________<br>> Fedora-infrastructure-list mailing list<br>
> <a href="mailto:Fedora-infrastructure-list@redhat.com">Fedora-infrastructure-list@redhat.com</a><br>> <a href="https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list">https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
</a><br>><br><br><br>--<br>Regards,<br> Damian<br><br>_______________________________________________<br>Fedora-infrastructure-list mailing list<br><a href="mailto:Fedora-infrastructure-list@redhat.com">Fedora-infrastructure-list@redhat.com
</a><br><a href="https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list">https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list</a><br></blockquote></div><br>