How to prevent DoS attacks against Apache - Practical Linux security

[@ansilver4435]

Thank you is not enough for this explanation. EVERYONE NEED TO SUPPORT THIS CONTENT

[@sebastianb2092]

Very nicely done thanks. Learning it for university and bc I'm getting into hosting & web dev myself I liked the approach!

[@AjithKumar-fg1mo]

Very good explanation for beginners in website security

[@thespicehoarder]

Wow! You even show us how to test it out and everything. :D

[@grilledcookie6259]

Wow, this is explained in such a great way. Thank you!:D

[@JasonPurkiss]

Worked for me many thanks

[@rob5381]

Great video something I will be looking into

[@wangjackie6227]

Hi, RUclips experts, when you were doing Java(WebSphere) development, did you ever meet Dos(Slowloris) 150079 Slow HTTP headers vulnerability? If yes, how could it be protested?

[@zaceshadowz6158]

Thanks A Lot For Detailed Explanation !

[@wangjackie6227]

Hi all,
We have a Java(Websphere) application, when we use Qualys scanning, it says our application has "Dos(Slowloris) 150079 Slow HTTP headers vulnerability", anybody kind-hearted could help me to fix it?

[@ihorlavrovskyi7726]

I see this question everywhere and have the same problem

[@ramzi-sah]

amazing ! +sub

[@fsmbtech]

Ples share this all commind

[@USSTOCKS88]

My local host error showing
HTTP/1.1 400 Bad Request
HTTP/1.1 400 Bad Request
HTTP/1.1 400 Bad Request
HTTP/1.1 400 Bad Request
How can i solve

[@davidbarrar5968]

I had similar, and had to change the port since my server was running on port 8081

[@davidbarrar5968]

@@BernardBass-visionduweb the test perl script, hits localhost:80. If your server isn't running on port 80, you will get Bad Request error. Make sure your server is running to test.

[@michelsp]

FROM: print $SOCKET "GET /?$_ HTTP/1.0

"; TO: print $SOCKET "GET /?$_ HTTP/1.0
Host: 127.0.0.1

";

[@mohamedsulaiman6994]

@@davidbarrar5968 how do i check which port my server is running on?

[@davidbarrar5968]

@@mohamedsulaiman6994 Hmm, this was so long ago, can't really remember... Your running apache server? My situation was using apache to proxy to a node server i had running on a specific port. Are you specifying a port? it would help to know more information about your server

[@musti5979]

at this point im being used by others no matter any school i join
i just got ddos attacked by them
i fucking hate this

[@WOHLOV]

How to prevent Brute Force attacks against Apache - Practical Linux security???

[@ChadReitsma]

fail2ban

[@nadeeshr6557]

how to prevent a slowloris attack

[@MiguelAngel-td9rv]

From Apache 2.2.15 it is proposed to use the mod_reqtimeout module to establish the proper configuration of your server and avoid the damage that these attacks are capable of causing. In addition to all this, it is advisable to use proxies and load balancers to make the attacker's action as difficult as possible. I hope you find it useful

[@mohamedsulaiman6994]

Hi sir , i am receving a 400 bad request

[@barncastle6193]

Same how did u fix

[@trafico10]

hi mister problem :
sudo perl test.pl
HTTP/1.1 400 Bad Request
HTTP/1.1 400 Bad Request
HTTP/1.1 400 Bad Request
HTTP/1.1 400 Bad Request
why
ubuntu 17

[@DuckademyITcourses]

Do you get it as the first response? Because the test.pl simulates the DoS attack and after a while the module which prevents it refuses the client as expected.

[@lev6666]

i am also getting Bad Request. and i did every step you did..

[@jgoep2310]

same here

[@barncastle6193]

Same how did u fix

[@jeanrodrigues6249]

Floppy