pfSense

This feature bug is related to this ticket.
http://redmine.pfsense.org/issues/2551

I can confirm that mod_evasive doesn't seem to be included in 2.0.1.

Should there be a mod_evasive.so

/usr/local/lib/lighttpd/mod_auth.so
/usr/local/lib/lighttpd/mod_proxy.so
/usr/local/lib/lighttpd/mod_access.so
/usr/local/lib/lighttpd/mod_accesslog.so
/usr/local/lib/lighttpd/mod_fastcgi.so
/usr/local/lib/lighttpd/mod_cgi.so
/usr/local/lib/lighttpd/mod_indexfile.so
/usr/local/lib/lighttpd/mod_dirlisting.so
/usr/local/lib/lighttpd/mod_staticfile.so
/usr/local/lib/lighttpd/mod_expire.so
/usr/local/lib/lighttpd/mod_compress.so
/usr/local/lib/lighttpd/mod_rewrite.so
/usr/local/lib/lighttpd/mod_redirect.so

lighttpd -V

[2.0.1-RELEASE][root@dl-firewall.larl.org]/var/etc(16): lighttpd -V
lighttpd/1.4.29 (ssl) - a light and fast webserver
Build-Date: Sep  7 2011 11:07:29

Event Handlers:

        + select (generic)
        + poll (Unix)
        - rt-signals (Linux 2.4+)
        - epoll (Linux 2.6)
        - /dev/poll (Solaris)
        - eventports (Solaris)
        + kqueue (FreeBSD)
        - libev (generic)

Network handler:

        + sendfile

Features:

        + IPv6 support
        + zlib support
        + bzip2 support
        + crypt support
        + SSL Support
        + PCRE support
        - mySQL support
        - LDAP support
        - memcached support
        - FAM support
        - LUA support
        - xml support
        - SQLite support
        - GDBM support

From lighty-CaptivePortal.conf

## modules to load
server.modules              =   (

                                                                        "mod_access", "mod_accesslog", "mod_expire", "mod_compress", "mod_redirect",
                                                                        "mod_fastcgi", "mod_cgi","mod_rewrite" 

This is causing me problems since the captive portal can run wild and use up all the memory on an Alix box.

I can confirm that on 2.0.3 it looks like mod_evasive is now there. Ermal, thank you for getting this fixed.

I'll try and confirm that it actually does limit the number of connections per IP, but memory use does look to be down at several sites that I have upgraded. On an Alix, The memory used to hover at 83% used, now it is sticking around 63% used.

[2.0.3-RELEASE][admin@cr-firewall.larl.org]/usr/local/lib/lighttpd(8): ls -l /usr/local/lib/lighttpd/
total 263
-rwxr-xr-x  1 root  wheel   7180 Apr 12 10:10 mod_access.so
-rwxr-xr-x  1 root  wheel  16996 Apr 12 10:10 mod_accesslog.so
-rwxr-xr-x  1 root  wheel  28761 Apr 12 10:10 mod_auth.so
-rwxr-xr-x  1 root  wheel  25055 Apr 12 10:10 mod_cgi.so
-rwxr-xr-x  1 root  wheel  19592 Apr 12 10:10 mod_compress.so
-rwxr-xr-x  1 root  wheel  20751 Apr 12 10:10 mod_dirlisting.so
-rwxr-xr-x  1 root  wheel   7059 Apr 12 10:10 mod_evasive.so
-rwxr-xr-x  1 root  wheel  10075 Apr 12 10:10 mod_expire.so
-rwxr-xr-x  1 root  wheel  55128 Apr 12 10:10 mod_fastcgi.so
-rwxr-xr-x  1 root  wheel   8310 Apr 12 10:10 mod_indexfile.so
-rwxr-xr-x  1 root  wheel  24110 Apr 12 10:10 mod_proxy.so
-rwxr-xr-x  1 root  wheel   9930 Apr 12 10:10 mod_redirect.so
-rwxr-xr-x  1 root  wheel  12712 Apr 12 10:10 mod_rewrite.so
-rwxr-xr-x  1 root  wheel  13672 Apr 12 10:10 mod_staticfile.so

## modules to load
server.modules              =   ( "mod_access", "mod_accesslog", "mod_expire", "mod_compress", "mod_redirect" 
                        ,"mod_rewrite","mod_evasive","mod_fastcgi" 
                )

evasive.max-conns-per-ip = 4