قطع و جلوگیری از حملات DDOS در Apache توسط مد mod_evasive

[hamed.ramzi]

با سلام

خوب زیاد سخت نیست کافیتس مطابق دستورات پیش برید.



nano evasive.sh



کد زیر را وارد کنید



#!/bin/bash

GSUDIR=/usr/src/gsu
GSUDIR2=/usr/local/apache/conf/gs

# Colors
Black="$(tput setaf 0)"
BlackBG="$(tput setab 0)"
DarkGrey="$(tput bold ; tput setaf 0)"
LightGrey="$(tput setaf 7)"
LightGreyBG="$(tput setab 7)"
White="$(tput bold ; tput setaf 7)"
Red="$(tput setaf 1)"
RedBG="$(tput setab 1)"
LightRed="$(tput bold ; tput setaf 1)"
Green="$(tput setaf 2)"
GreenBG="$(tput setab 2)"
LightGreen="$(tput bold ; tput setaf 2)"
Brown="$(tput setaf 3)"
BrownBG="$(tput setab 3)"
Yellow="$(tput bold ; tput setaf 3)"
Blue="$(tput setaf 4)"
BlueBG="$(tput setab 4)"
LightBlue="$(tput bold ; tput setaf 4)"
Purple="$(tput setaf 5)"
PurpleBG="$(tput setab 5)"
Pink="$(tput bold ; tput setaf 5)"
Cyan="$(tput setaf 6)"
CyanBG="$(tput setab 6)"
LightCyan="$(tput bold ; tput setaf 6)"
NC="$(tput sgr0)" # No Color
#End Color


clear

if [ -e /usr/src/gsu ]; then
echo -ne "$LightBlue Check Sources Files [ $LightGreen OK $LightBlue ]";
else
echo "$LightBlue Unable To Locate GS Source Folder [ $Red Field $LightBlue ]"
mkdir $GSUDIR;
fi
echo ""
if [ -e /usr/local/apache/conf/gs ]; then
echo -ne "$LightBlue Check Dependencies Files [ $LightGreen OK $LightBlue ]";
else
mkdir $GSUDIR2;
fi


function press_enter
{
echo ""
echo -n "$Red Press Enter To Go Back To Main Menu ...."
read
clear
}

selection=
until [ "$selection" = "0" ]; do
echo ""
echo "$LightBlue ++++++++++++++++++++++++++++++++++++++++++++++++"
echo "$LightBlue + $LightGreen Mod_Evasive v1.10.1 Installer $LightBlue +"
echo "$LightBlue ++++++++++++++++++++++++++++++++++++++++++++++++"
echo ""
echo "$LightGreen 1 - Install Mod_Evasive (Apache1)"
echo "$LightGreen 2 - Install Mod_Evasive (Apache2)"
echo "$LightGreen 3 - Uninstall Mod_Evasive"
echo "$LightGreen 0 - Exit"
echo ""
echo -n "$LightBlue Enter Selection: "$NC
read selection
echo ""
case $selection in
1 ) echo -n "Do You Want To Install Mod_Evasive For (Apache1)? (y/n)";read answer
if [ $answer = y ];then
cd $GSUDIR
wget "http://pkgs.fedoraproject.org/repo/pkgs/mod_evasive/mod_evasive_1.10.1.tar.gz/784fca4a124f25ccff5b48c7a69a65e5/mod_evasive_1.10.1.tar.gz"
tar -xf mod_evasive_1.10.1.tar.gz
cd mod_evasive
apxs -iac mod_evasive.c
/etc/init.d/httpd restart
httpd restart
service httpd restart
echo -ne "$LightBlue Mod_Evasive For Apache1 Installation Successful [ $LightGreen Good $LightBlue ]";
else
echo "Abort Mod_Evasive For (Apache1) Installation!"
fi
press_enter;;
2 ) echo -n "Do You Want To Install Mod_Evasive For (Apache2)? (y/n)";read answer
if [ $answer = y ];then
cd $GSUDIR
wget "http://pkgs.fedoraproject.org/repo/pkgs/mod_evasive/mod_evasive_1.10.1.tar.gz/784fca4a124f25ccff5b48c7a69a65e5/mod_evasive_1.10.1.tar.gz"
tar -xf mod_evasive_1.10.1.tar.gz
cd mod_evasive
apxs -i -a -c mod_evasive20.c
/etc/init.d/httpd restart
httpd restart
service httpd restart
echo -ne "$LightBlue Mod_Evasive For Apache2 Installation Successful [ $LightGreen Good $LightBlue ]";
else
echo "Abort Mod_Evasive For (Apache2) Installation!"
fi
press_enter;;
* ) echo "Please enter 1, 2"; press_enter
esac
done




ذخیره کنید و اجرا نمائید و نوع ورژن اپاچی را انتخاب کنید




chmod +x evasive.sh
./evasive.sh



در فایل httpd.conf اضافه کنید



<IfModule mod_evasive20.c>
DOSHashTableSize 3097
DOSPageCount 3
DOSSiteCount 100
DOSPageInterval 3
DOSSiteInterval 5
DOSBlockingPeriod 300
DOSLogDir "/var/log/httpd/modevasive/"
DOSEmailNotify your@emailaddress.com
</IfModule>


اگر از csf استفاده میکنید دستور زیر را اجرا کنید



/usr/bin/sudo /usr/sbin/csf -td %s 3600


دسترسی sudo رابرای فایلوال تنظیم میکنیم



visudo


بعد از root ALL = (ALL) وارد میکنیم



User_Alias APACHE = apache
Cmnd_Alias FIREWALL = /sbin/iptables, /usr/sbin/csf, /sbin/ifconfig, /sbin/route
APACHE ALL = (ALL) NOPASSWD: FIREWALL


ذخیره و تمام

موفق باشید

[talait]

مفید بود

[majidisaloo1]

ممنون اما میشه فرایند انجام کار را بگین که چطور میاد مقابله میکند؟