Its always nice to have extra security surounding the architecture and apps, but for that we will need extra resources that we currently dont have right now, i personally would like to have extra RAM on the proxies. mod_security, is not that light, but its really nice and handy :) Tweaks that we should do right now, is verify the values in MaxClients and everything regarding the threads (childs), and see if unecessary modules are being loaded or not At least is my opinion... Paulo <div>On 5/27/07, Damian Myerscough <<a href="mailto:damian.myerscough@gmail.com">damian.myerscough@gmail.com</a>> wrote:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Yea, it would. However mod_easvie is able to detect if users a continuously hitting refresh to consume bandwidth. mod_evasive is also recommended by Ryan Barnett who is the author of Preventing Web Attacks with Apache. Has anyone also thought about deploying mod_security? or is it me just being paranoid. I think this would make an excellent topic to talk about in the next meeting? On 27/05/07, Mike McGrath <<a href="mailto:mmcgrath@redhat.com"> mmcgrath@redhat.com</a>> wrote: > Damian Myerscough wrote: > > Ok, I guess we can talk more about it after the release of Fedora 7. > > > I also have a question about mod_evasive. Wouldn't it be better/most > efficient to limit that traffic before it even hits the apache instance? > > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > <a href="mailto:Fedora-infrastructure-list@redhat.com">Fedora-infrastructure-list@redhat.com</a> > <a href="https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list">https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list </a> > -- Regards, Damian _______________________________________________ Fedora-infrastructure-list mailing list <a href="mailto:Fedora-infrastructure-list@redhat.com">Fedora-infrastructure-list@redhat.com </a> <a href="https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list">https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list</a> </blockquote></div>