Re: [users@httpd] Configure httpd not to send responses

2012-02-03 Thread Igor Cicimov
How about redirecting all the traffic to a cgi script that does nothing? Or it might be a script that parses the headers and creates some stats files for you. On Feb 4, 2012 5:11 AM, "Andrew Hester" wrote: > Hello, > > ** ** > > I would like to use httpd with mod_remoteip and mod_evasive to

[users@httpd] Configuration file effects on security

2012-02-03 Thread Silviu Andrica
Hi, I was wondering if you know any tool that checks how secure an Apache configuration is. I know about Nikto and W3AF, but those tools are targeted at web applications. I'm more interested in tools that target web servers. Also, can you recommend some Apache configurations / setups where Nikt

[users@httpd] Configure httpd not to send responses

2012-02-03 Thread Andrew Hester
Hello, I would like to use httpd with mod_remoteip and mod_evasive to provide some DoS response for my site. I might later use mod_security for other rules as well. Because of many reasons the httpd server will will not be inline, but instead I intend to mirror traffic to the server for anal

[users@httpd] Resctrit bandwidth and Access

2012-02-03 Thread Hugo Gomes
Hi, In my webserver i have a link where i stream some videos, but i'm afraid that suddently 500 people access the videos and my network/server goes down. The videos files are very big 1GB each. I think there is some module to restrict access by IP or bandwitdth. My intention is to limit th