Skip to main content

How to configure mod_evasive to show HTTP status 429 instead of 403? [Resolved]

Some search engine spiders like Bingbot crawl too rapidly and does not seem to obey robots.txt crawl-delay directive. This triggers the DOS defence mechanism in mod_evasive to generate HTTP 403 forbidden errors. But showing 403 errors to bots for perfectly valid pages is not ideal and may affect page rank. Is there a way to configure mod_evasive to show HTTP status 429 instead of 403?

429 Too Many Requests

The 429 status code indicates that the user has sent too many requests in a given amount of time ("rate limiting").

The response representations SHOULD include details explaining the condition, and MAY include a Retry-After header indicating how long to wait before making a new request.

Question Credit: Question Overflow
Question Reference
Asked October 11, 2017
Posted Under: Network
2 Answers

Basically you just change the HTTP_FORBIDDEN to HTTP_TOO_MANY_REQUESTS in mod_evasive20.c and compile again.

credit: vrr
Answered October 11, 2017
Looks like that is the only way. – Question Overflow Oct 22 '14 at 4:50
 CanDoerz  9 months ago

I forked mod_evasive and made the response status configurable (along with some other features), check it out:

To configure this, install the new version and add DOSHTTPStatus 429 to your config (either globally or in the virtualhost you want to protect).

credit: jvdmr
Answered October 11, 2017
Your Answer