3 Fructidor CCXI (August 20, 2003)
As The Sci-Fi Lullaby Starts To Build
Sort of an entry for the sake of an entry here. Some info about the various Apache modules I've installed.
As I think I've mentioned a couple of times now, I went crazy with the Apache modules.
Here's my review of the ones I've tried:
mod_text2html: Takes text/plain documents and translates them into HTML documents so that URLs become links. Destroys any formatting that may be present in the file at the same time though. Not really worth it, in my opinion.
Verdict: Long gone.
mod_random: Not really that random. Clicking the 'Ancient and Mysterious Link of Randomness' multiple times in succession will give you the same link for a period of time, after which it will change to another link and repeat the process.
Verdict: If you want something closer to randomness you're better served by a script. Update: Gone.
mod_relocate: Wasn't really what I was looking for. To tell the truth, I'm having trouble figuring out who exactly would need something like this.
Verdict: Probably will be gone once I can be bothered to fix the links that refered to it. Update: Gone.
mod_gzip: Mmmm… Compressed transfers. I even found that there were some pages I could precompress and thereby save time transferring. (The stylesheet is an example. Mmmm… Auto-updating of precompressed pages.)
Verdict: If your website isn't made up entirely out of CGI scripts or server side includes then why aren't you using this?
mod_speedycgi: Speeds up perl scripts by running them persistently. Unfortunately there's some issues so not all scripts will run it. No idea how it compares against mod_perl either.
Verdict: Worth it, but be prepared to test every script to make sure it doesn't act all wonky.
mod-auth-useragent: Module for blocking requests based on user agent. I use it to block a variety of user agents I'd rather not have accessing my site. Has the advantage over mod_security in that parameter strings don't automatically become regexes. (i.e. the parameter "e" will only match a user agent of "e" with this module, while mod_security will match against any user agent that contains the letter 'e') The only downside is that you can't set it to match blank user agents. (But mod_security can!)
Verdict: Nice, small. Doesn't provide that much security but it's nice to have. Probably will stay.
mod_limitipconn: Limits the amount of connections per IP. This is only applied to the /files directory and there aren't enough files currently in there to trip it off anyways.
Verdict: Unknown
mod_dosevasive: Supposedly protects against minor DoS attempts by temporarily blocking offending IPs based on a set of conditions. I haven't been able to set it off yet, so I don't know how well it works.
Verdict: Unknown and no, this is not an invitation to try it out. Update: Managed to trigger it when testing a new version of my random link script. Seems to work fine, although I may have to adjust the settings a bit.
mod_security: Allows you to define combinations of parameters that will be denied access to the site. Nice little module, but the parameters are a tad touchy at times or maybe I just need to study the manual more.
Verdict: Worth it once I upgraded to version 1.6 and could tell it to log only offending requests rather than all requests. Definitely going to stay.
Also installed but as of yet untested are mod_xslt and mod_tsunami.










