Mon premier blog

Hardening Apache Tony Mobily
Publisher:

We are going for a DIY installation were everything is compiled from source, so some development tools are required. In my earlier entry I discussed an interesting topic on firewalls and why we don't need them. Versions, including 1.3 family release, upgrade to to the current 2.2 version as soon as possible.") Upgrading: See /usr/share/doc/apache2.2-common/NEWS.Debian.gz; Hardening. Tips to harden apache webserver: Disable weak SSLV2 siphers edit ssl.conf and add SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:!LOW:!SSLv2:+EXP. It has a number of built in features that can improve your website resistance to attacks. I setup a SuSE Enterprise Linux (SLES) 10 SP2 web server last week, and wanted to do some basic hardening of the default Apache configuration. The Apache web server is a crucial part of the website infrastructure. Apache/Hardening; Packaging modules. Turn off these variables: TraceEnable off. There are many more security features in Apache than listed here, I will only list some of the very basic hardening configurations for Apache. After having been through security audits over the years I now have a short list of things I always change after having installed an Apache HTTP Server. Having access to the kernel is the easiest way to escalate users' privileges. Instructions follow on how to build and harden one of the most common configurations out there. Posted in howto, ubuntu at 8:41 pm by nixelite. Linux kernel hardening The kernel is the most frequent target for attackers. Was trying to set up a web server on my ubuntu laptop and I came across this pretty useful page about apache hardening :). Tony Mobily Apache Apress 1590593782. I put a small LAMP server to the test and got my results.