Hi there,

On Sat, 12 Jul 2003, Jesse Erlbaum wrote:

> > Is it possible to dynamically ban IP addresses using mod_perl.
> 
> Yes, it is possible with mod_perl.  You can create a PerlAccessHandler

In addition to Jesses's comments, I'd suggest that you might want to
look at firewalling techniques to eliminate the requests before they
ever reach your server.  If your mod_perl server is doing the access
denial, then there has already been a lot of processor activity wasted
on the attack.  Something like IPCop is freely available, easy to
configure (if you avoid pitfalls with multiple Ethernet cards being
shuffled:) and very effective.

But there is no easy solution to a determined DOS attack on an open IP.

73,
Ged.

Reply via email to