apache: relax mod_evasive further

diff --git a/cookbooks/apache/attributes/default.rb b/cookbooks/apache/attributes/default.rb
index 557085b56b1f64c8923a1df367bc2cd901bf8a91..793881ea57121c66ae9068e3067f98a4ba6e5047 100644 (file)
--- a/cookbooks/apache/attributes/default.rb
+++ b/cookbooks/apache/attributes/default.rb
@@ -32,8 +32,8 @@ default[:apache][:buffered_logs] = true
 
 default[:apache][:evasive][:enable] = true
 default[:apache][:evasive][:dos_hash_table_size] =  65536
-default[:apache][:evasive][:dos_page_count]      =  50
-default[:apache][:evasive][:dos_site_count]      =  250
+default[:apache][:evasive][:dos_page_count]      =  250
+default[:apache][:evasive][:dos_site_count]      =  500
 default[:apache][:evasive][:dos_page_interval]   =  1
 default[:apache][:evasive][:dos_site_interval]   =  1
 default[:apache][:evasive][:dos_blocking_period] =  60

diff --git a/cookbooks/apache/templates/default/evasive.conf.erb b/cookbooks/apache/templates/default/evasive.conf.erb
index 2670f3e15c18e62f43104d698324f21cdcfc945d..d3014825d6dda5a478149f1bed42d8164e9beff8 100644 (file)
--- a/cookbooks/apache/templates/default/evasive.conf.erb
+++ b/cookbooks/apache/templates/default/evasive.conf.erb
@@ -1,10 +1,10 @@
 # DO NOT EDIT - This file is being maintained by Chef
 
 <IfModule mod_evasive20.c>
-    DOSHashTableSize <%= node[:apache][:evasive][:dos_hash_table_size] %>
-    DOSPageCount <%= node[:apache][:evasive][:dos_page_count] %>
-    DOSSiteCount <%= node[:apache][:evasive][:dos_site_count] %>
-    DOSPageInterval <%= node[:apache][:evasive][:dos_page_interval] %>
-    DOSSiteInterval <%= node[:apache][:evasive][:dos_site_interval] %>
-    DOSBlockingPeriod <%= node[:apache][:evasive][:dos_blocking_period] %>
+    DOSHashTableSize    <%= node[:apache][:evasive][:dos_hash_table_size] %>
+    DOSPageCount        <%= node[:apache][:evasive][:dos_page_count] %>
+    DOSSiteCount        <%= node[:apache][:evasive][:dos_site_count] %>
+    DOSPageInterval     <%= node[:apache][:evasive][:dos_page_interval] %>
+    DOSSiteInterval     <%= node[:apache][:evasive][:dos_site_interval] %>
+    DOSBlockingPeriod   <%= node[:apache][:evasive][:dos_blocking_period] %>
 </IfModule>