Apache vulnerable to DoS?

[kirkas]

I just got an email today that has me a little worried. According to SANS Internet Storm Center, a DoS tool has just be released recently that targets Apache web servers, among others. After a little digging, I was able to find a site with the alleged DoS tool. I won't post it here, though, since I believe it's too dangerous to make public — unless the BODhost crew want to know about it, that is. In any case, the ISC article already describes how it works.

So, are we vulnerable, and is there anything we can do to protect ourselves? One article I've read says that one possible solution is mod_limitipconn. I would like to know if that's true and if there's anything we could or should do to protect our servers.

[Dave M]

That's worrying news indeed. Considering that a majority of web servers on the internet run on Apache, that's quite a lot of potential victims. >_<

[gazzie]

This isn't anything new. This kind of vulnerability has always been present in Apache and is easily blocked anyway. CSF can block this kind of attack, I believe.

[kirkas]

Oh, so it's not that dangerous, then? That's a relief. If it's really so easily stopped, then BODhost's own security and DDoS measures should be able to stop it if it happens, right?

[userdan]

That gave me a scare! It's good to know that it's not really as bad it sounded. Yeah, I know, unless you're a target, the chance of being DoS'ed is really slim. Even so, I'll rest easier knowing that my server is safe and secure.

[mander]

I doubt I would put more hype into it pending they have things under control, but I would always make sure that anything you can do to keep things secure, you do, rather than assume "everything will be okay". A friend did that and ended up having to rebuild his home test machine from nothing.

[Mickey]

That's a bit scary, as most web servers run on Apache. I read that DDOS usually attack sites hosted on high-profile web servers like banks, credit card payment gateways and banks. It's a bit relieving to know that my tiny site is not their target Yet, prevention is always better than cure.