Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id ABCFD200CF3 for ; Wed, 13 Sep 2017 10:35:32 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id AA3971609CA; Wed, 13 Sep 2017 08:35:32 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id EE1851609C9 for ; Wed, 13 Sep 2017 10:35:31 +0200 (CEST) Received: (qmail 70331 invoked by uid 500); 13 Sep 2017 08:35:30 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 70320 invoked by uid 99); 13 Sep 2017 08:35:30 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 13 Sep 2017 08:35:30 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id D48D21A23B5 for ; Wed, 13 Sep 2017 08:35:29 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -2.301 X-Spam-Level: X-Spam-Status: No, score=-2.301 tagged_above=-999 required=6.31 tests=[RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id 4llCGNUldI9M for ; Wed, 13 Sep 2017 08:35:25 +0000 (UTC) Received: from idaho.hud.ac.uk (idaho.hud.ac.uk [161.112.232.76]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTPS id 4B5105FE64 for ; Wed, 13 Sep 2017 08:35:25 +0000 (UTC) Received: from [161.112.232.194] (port=2083 helo=FULCRUM.ad.hud.ac.uk) by idaho.hud.ac.uk with esmtp (Exim 4.82) (envelope-from ) id 1ds38h-0007EA-4v for users@httpd.apache.org; Wed, 13 Sep 2017 09:35:19 +0100 Received: from FLANKER.AD.HUD.AC.UK (172.17.196.51) by Exchange2k10.hud.ac.uk (161.112.232.194) with Microsoft SMTP Server (TLS) id 14.3.361.1; Wed, 13 Sep 2017 09:35:17 +0100 Received: from VALKYRIE.AD.HUD.AC.UK ([fe80::f455:1ca:f735:1fd0]) by FLANKER.AD.HUD.AC.UK ([fe80::bd34:ec34:70d2:9dec%16]) with mapi id 14.03.0361.001; Wed, 13 Sep 2017 09:35:18 +0100 From: Matthew Jones To: "users@httpd.apache.org" Thread-Topic: mod_evasive whitelist question Thread-Index: AQHTLGs60AGJM7xR30a+jl53zRcQTA== Date: Wed, 13 Sep 2017 08:35:17 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.3.170325 x-originating-ip: [10.167.65.110] Content-Type: text/plain; charset="iso-8859-1" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [users@httpd] mod_evasive whitelist question archived-at: Wed, 13 Sep 2017 08:35:32 -0000 Hi all I'm trying to whitelist 10.* addresses so that they=B9re not caught by mod_evasive. I=B9ve added the 10.*.*.* range to a DOS whitelist directive i= n evasive.conf but it=B9s still blocking various 10.* IPs. Here=B9re the contents of evasive.conf: DOSHashTableSize 9239 DOSPageCount 5 DOSSiteCount 32 DOSPageInterval 1 DOSSiteInterval 1 DOSBlockingPeriod 60 DOSLogDir "/var/log/mod_evasive" DOSEmailNotify DOSWhitelist 161.112.232.37 DOSWhitelist 161.112.232.102 DOSWhitelist 161.112.232.103 DOSWhitelist 161.112.232.111 DOSWhitelist 161.112.232.117 DOSWhitelist 161.112.232.221 DOSWhitelist 161.112.232.168 DOSWhitelist 172.17.193.* DOSWhitelist 172.17.194.* DOSWhitelist 172.17.195.* DOSWhitelist 172.20.*.* DOSWhitelist 172.22.*.* DOSWhitelist 10.*.*.* I=B9m sorry for the noddy question, but what have I done wrong here? All th= e documentation I=B9ve found says that you can use multiple DOSWhitelist directives, with wildacrds used on up to the last 3 octets. I=B9m running Apache2.4 on Ubuntu 14.04, please let me know if any other information would be helpful. Thanks in advance for your valueable time. -- Matt Jones Senior Network Systems Specialist x3967 @huddsweb University of Huddersfield inspiring tomorrow's professionals. [http://marketing.hud.ac.uk/_HOSTED/EmailSig2014/EmailSigFooter.jpg] This transmission is confidential and may be legally privileged. If you rec= eive it in error, please notify us immediately by e-mail and remove it from= your system. If the content of this e-mail does not relate to the business= of the University of Huddersfield, then we do not endorse it and will acce= pt no liability. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org For additional commands, e-mail: users-help@httpd.apache.org