Re: My apache server attacked

["Yannick Mercier" <yanmercier@xxxxxxxxx>]

You may want to take a look at mod_evasive, depending on

at what rate the mass posting took place, this could have blocked it

 

On 4/23/07, Jacky <jackywong@xxxxxxxxx> wrote:

Dear all,

In our production environment, we have 2 apache servers firewalled to accept port 80 and 443 only.
These apache servers will load balanced to 2 of our resin servlet container. Recently we checked from our logs and verified that there are certain unwelcomed individuals that did a mass posting to our apache servers causing our normal operations nearly to a halt.

I would like to ask for advice from the experienced individuals from this mailing list, what you guys normally do to counter this?
What we are doing right now is blocking them from firewall. Wish to get some suggestions from this list.

Thank you..

-- 
Warm regards,
Jacky Wong

--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx