how to enable mod_dosevasive to BLOCK IP in IPTABLE automatically ?

[wahaha]

how to enable mod_dosevasive to BLOCK IP in IPTABLE automatically ?
how to enable mod_dosevasive to BLOCK IP in IPTABLE automatically ?

I am using kiss .... and mod_dosevasive in my server .


the default setting of mod_dosevasive in httpd.conf :
<IfModule mod_dosevasive.c>
DOSHashTableSize 3097
DOSPageCount 2
DOSSiteCount 50
DOSPageInterval 1
DOSSiteInterval 1
DOSBlockingPeriod 10
</IfModule>


but i want to add a line in <IfModule mod_dosevasive.c>
DOSSystemCommand "/usr/sbin/iptables -I INPUT -s %s -j DROP"

Someone tell me the above command line can help us to add the attacker IP in INTABLEs automatically (for block the bad IP)....

BUt i am using kiss... kiss has already replace the function of iptables....


so that i am so confuse ... how to how to enable mod_dosevasive to BLOCK IP in IPTABLE automatically when i using KISS firewall in the same server ?

 

[nobaloney]

I believe I saw and responded to a post similar to this in the past few days.

The kiss firewall simply gives you a set of rules to start with.

What you want to do won't affect kiss at all, but running kiss stop, kiss start, and kiss restart, will all drop the IP#s added by dosevasive.

Jeff