Protection against Slowloris?

[brijendrasial]

What actually measures you all are taking to protect your server from slowloris attack?

[Parricull]

for myself hosted with OVH which has ddos protection as standard but also on the server side use mod_antiloris.

Code Select Expand


1. Download the installer and install from Sourceforge.net:

$ cd /usr/local/src
$ wget http://sourceforge.net/projects/mod-antiloris/files/mod_antiloris-0.4.tar.bz2/download
$ tar -xvjf mod_antiloris-0.4.tar.bz2
$ cd mod_antiloris-*
$ apxs -a -i -c mod_antiloris.c

2. Restart Apache:

$ service httpd restart

[Farukh Khan]

What else hard solution you have bullten for slowloris protection in CWP?

[brijendrasial]

I would just enable nginx to stop it.

[Farukh Khan]

But if we don't want to use NGINX? as CWP NGINX still have the Apache 2.2.15 Double apache installation bug when I have already Apache 2.4 with suPHP 0.7.2 installed in my CWP. Also would Apache + Varnish + NGINX + CloudFlare would be a good option to choose?

[Glenn]

Just rebuild Apache with the CWP slowloris module

[yeknafar]

For begginers like myself may be useful:

for the address enter:
wget http://sourceforge.net/projects/mod-antiloris/files/mod_antiloris-0.4.tar.bz2


and if for  [root@srv mod_antiloris-0.4]# apxs -a -i -c mod_antiloris.c

You get such an error:
-bash: apxs: command not found


You have to install the Apache dev tools by this command:

yum install httpd-devel

Then continue  

[bullten]

apxs is located here : /usr/local/apache/bin/apxs

You dont have to install anything using yum for that.

Installing that using yum will break your apache as you will be bound to use another yum version of apache and will cause issue with your server.

[yeknafar]

It happend to me.

What should I do now?

[bullten]

When you login to cwp root there it will show to fix your apache as your are using different version of apache. Fix using that.

Or do

yum remove httpd httpd-devel
yum reinstall cwp-httpd

[yeknafar]

You mean from here?

Job for httpd.service failed because the control process exited with error code. See "systemctl status httpd.service" and "journalctl -xe" for details.


I do not need to remove that (yum install httpd-devel) too?

I found this solution on other forum.

[bullten]

Did you try above what I wrote? Or you found different solution on another forum for that?

I didn't get what you mean

[yeknafar]

I did not find your solution.
When I go to the root of the CWP panel I do not see  any fix for it.
Just there is a red light in front of the Apache and when I restart it it shoews such a thing:

"Job for httpd.service failed because the control process exited with error code. See "systemctl status httpd.service" and "journalctl -xe" for details."

[bullten]

Run the commands below.

yum remove httpd httpd-devel
yum reinstall cwp-httpd

[bullten]

Between I just replicated the same thing on one of my local server.

See the screenshot to know what I was pointing to.

http://send.bullten.net/download/3ccb94deb7f5093514bc452d032e26e5.html