[mod_evasive] update comment to add references
update comment to add references to other modules and mechanisms
available in lighttpd to enforce security policy
/**
* mod_evasive
*
- * we indent to implement all features the mod_evasive from apache has
+ * A combination of lighttpd modules provides similar features
+ * to those in (old) Apache mod_evasive
*
* - limit of connections per IP
+ * ==> mod_evasive
* - provide a list of block-listed ip/networks (no access)
+ * ==> block at firewall
+ * ==> block using lighttpd.conf conditionals and mod_access
+ * ==> block using mod_magnet and an external (updatable) constant database
+ * https://wiki.lighttpd.net/AbsoLUAtion#Fight-DDoS
* - provide a white-list of ips/network which is not affected by the limit
- * (hmm, conditionals might be enough)
+ * ==> allow using lighttpd.conf conditionals
+ * and configure evasive.max-conns-per-ip = 0 for whitelist
* - provide a bandwidth limiter per IP
+ * ==> set using lighttpd.conf conditionals
+ * and configure connection.kbytes-per-second
+ * - enforce additional policy using mod_magnet and libmodsecurity
+ * ==> https://wiki.lighttpd.net/AbsoLUAtion#Mod_Security
*
* started by:
* - w1zzard@techpowerup.com
