control: severity -1 normal
control: tags -1 moreinfo unreproducible

On Thu, 20 Nov 2025 at 23:53, Daniel Leidert <[email protected]> wrote:
>
> Source: libapache-mod-evasive
> Version: 2.4.0-2
> Severity: serious
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> I attempted to install and use the evasive module, but it seems completely
> dysfunctional. I couldn't get it to at least output something to a log file or
> send a mail. I tested with the standard config and with the instructions found
> at https://wiki.debian.org/fr/Apache/mod_evasive. I am sure that the config 
> did
> not contain an issue. I confirmed that the module was loaded. The logs didn't
> show anything at all.
>
> Is it possible that this module is no longer functional with the Apache 
> version
> in Trixie?

Works for me (tm).

What is the output of `apache2ctl -M | grep -i evasive`?

Also you could perform a DOS yourself via `ab -c 50 -n 1000
http[s]://example.org/` (with ab from the package apache2-utils).

> Regards, Daniel
>
>
> - -- System Information:
> Debian Release: forky/sid
>   APT prefers stable-updates
>   APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 
> 'oldstable-updates'), (500, 'oldstable-security'), (500, 
> 'oldoldstable-updates'), (500, 'oldoldstable-security'), (500, 
> 'oldoldstable'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (500, 
> 'oldstable'), (1, 'experimental')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 6.17.7+deb14+1-amd64 (SMP w/16 CPU threads; PREEMPT)
> Kernel taint flags: TAINT_OOT_MODULE
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not 
> set
> Shell: /bin/sh linked to /usr/bin/dash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled
>
> -----BEGIN PGP SIGNATURE-----
>
> iQIzBAEBCgAdFiEEvu1N7VVEpMA+KD3HS80FZ8KW0F0FAmkfm3kACgkQS80FZ8KW
> 0F0GSxAAufqvnge7cZd6KMTL9RgiFXXlfjZ7fxhnsFuUJMHrMf5fzB/s+5rEDG6j
> 5+okZWaQAA573KhrdHHpzQXRLE1JRyrcrOWe6eIuzDq7L+7nKH31YgUxZnKasU0R
> xKiAR/lS8+WkTzp7nL577RgF/fXV3KDDTQ1g9K5qCzLedlDsaWsa+/FkOTRRMA2e
> MPrdL6N+DagZQzLXJnqKPUtBanp6Bhh7Eq6OrhjUP9oVnmKlsD2HH2AwHYG5+KZo
> 0V6Xnb/czAy9lykBHzNZ6AIk5O9mBqUQ/zN3vxFx2QGOFeImrnwYk5ff6lHy7WAo
> BLnvw2Iz6Mldv4JuL2aWuisIo2DVBUISfu8ERWJPG9kMpyJSi0hYotzyuvJEbFru
> g1mng/nXN7H03NEK+zGFSus0/OVVgMIgOHEGUOBp6SuScv5uNDZDSyzyP8KL9Gi1
> JrU1iWtbgfEM25RSL1eeWMCewuhIX3gX2emPsy225yRL6vRzaC0I2eNRBnqWgWrS
> ILjwbeQEi0T4Vz9qtjSIe2AtuxEs5BDOi0CRQTaiwuFnFFlZ2yiP/pR22s7VY/fC
> VN88C1VZnsjze/T1ZtBq4sRF8uG0gl98CF+v3DfpOJBgWLpayHNiVFrytQDV/1tm
> w1xDS7XqVdWjEIR9kKYT2JXiREv3yAvAZxkoZhsZcQTilBXxMds=
> =Sb3L
> -----END PGP SIGNATURE-----

Reply via email to