Hello Dear Challengers,
Today i installed
fail2ban on the wechall server.
Be aware that you can now
get banned under certain conditions.
12 POSTs within 10 seconds give you 20 minutes on the substitutes` bench.
GeSHi`ed plain code for
jail.conf 1
2
3
4
56
7
8
9
10 |
[apache-post]
enabled = true
filter = apache-post
action = iptables-multiport[name=apache-post, port="80,443", protocol=tcp]
logpath = /var/log/apache2/access.log
findtime = 10
bantime = 1200
maxretry = 12
|
Beside that i tweaked the Apache Settings a bit:
GeSHi`ed plain code for
000.default.conf 1
2
3
4
56
7
8
9
1011
12
13
14
1516
17
18
19
2021
22
23
24
25 |
# Those look sane to me :)
LimitRequestLine 256
LimitRequestFieldsize 128
LimitRequestFields 24
LimitRequestBody 8777216
KeepAlive 1
MaxKeepAliveRequests 256 # moa!
KeepAliveTimeout 20 # longer!
# End of sanity :)
RewriteLogLevel 0
RequestReadTimeout header=5 body=15 # Slow countries like germany are not wanted?
#DeflateCompressionLevel 3 # default is default from zlib
#DeflateMemLevel 5 # default is default from zlib
#DeflateWindowSize 15 # default is default from zlib
#ListenBacklog 8 # BETTER NOT TOUCH
StartServers 16 # moa!
MinSpareServers 8 # moa!
MaxSpareServers 32# moa!
#MaxClients 512 # BETTER NOT TOUCH
#ServerLimit 2048 # BETTER NOT TOUCH
|
I hope the shorter downtimes did not disturb your browsing habits.
Happy Challenging!
gizmore