mod_dosevasive DOSSystemCommand problem
 

Hello,

I installed mod_dosevasive and it seems to work fine.
The only think that I can't get working is adding a IPTABLES rule to block an IP address with:
DOSSystemCommand "su - root -c '/sbin/iptables -A INPUT -s %s -j DROP' ".

Something strange is going on with DOSSystemCommand.

For example the following directive works fine:
DOSSystemCommand "ls -l >> log/test.txt"
but without the -l option it doesn't work:
DOSSystemCommand "ls >> log/test.txt"

Adding "su - root -c" doesn't help.

DOSSystemCommand "echo sometext >> log/test.txt"
on the other hand works fine.

I also do not succeed in running a shell script with DOSSystemCommand:
DOSSystemCommand "su - root -c 'sh script.sh' ".
no matter what path or user I use. The permissions are rwxrwxrwx.

Does anybody know why some commands run fine with DOSSystemCommand while others don't????

Is it a good idea to block IP addresses in iptables via DOSSystemCommand?

Thanks a lot for any help!

Super Mouse

Try using sudo or something similar which stays in the current shell..

I would like to see the value in DROPing after this works too..
It's easy to construct DOS attacks by spoofing dns server addresses etc..
You may wish to look at the iptables target TARPIT instead as a way of reducing conntrack overhead..