apache: increase mod_evasive page_count to reduce iD false positives

[chef.git] / cookbooks / apache / attributes / default.rb

diff --git a/cookbooks/apache/attributes/default.rb b/cookbooks/apache/attributes/default.rb
index 793881ea57121c66ae9068e3067f98a4ba6e5047..075e4c86f2d443e3f18aa86ecac03cec38f39437 100644 (file)
--- a/cookbooks/apache/attributes/default.rb
+++ b/cookbooks/apache/attributes/default.rb
@@ -31,9 +31,10 @@ default[:apache][:listen_address] = "*"
 default[:apache][:buffered_logs] = true
 
 default[:apache][:evasive][:enable] = true
-default[:apache][:evasive][:dos_hash_table_size] =  65536
-default[:apache][:evasive][:dos_page_count]      =  250
-default[:apache][:evasive][:dos_site_count]      =  500
-default[:apache][:evasive][:dos_page_interval]   =  1
-default[:apache][:evasive][:dos_site_interval]   =  1
-default[:apache][:evasive][:dos_blocking_period] =  60
+default[:apache][:evasive][:hash_table_size] = 65536
+# page_count is misnomer as it can match backends in some cases
+default[:apache][:evasive][:page_count] = 150
+default[:apache][:evasive][:site_count] = 250
+default[:apache][:evasive][:page_interval] = 1
+default[:apache][:evasive][:site_interval] = 1
+default[:apache][:evasive][:blocking_period] = 60