Apache mod_evasive does not call system command on DoS event
Bug #1067398 reported by
Jozsef Dubravszky
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
libapache-mod-evasive (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
Apache mod_evasive does not call the system command defined in DOSSystemCommand config parameter. Module works fine, evades DoS attacks but does not execute the specified command. This prvents effective protection like notifying other modules/services to take appropriate measures (firewall, log, notification etc.)
The following bug may be relevant to this one:
https:/
To post a comment you must log in.
I don't think the /bin/mail bug is actually relevant.
But to verify the issue you posted, can you check to see whether the www-user can invoke the command specified? Is there anything in syslog that indicates a problem?