WebApp Sec mailing list archives

Re: secure Apache build question


From: shawn <pakkit () codepiranha org>
Date: Sun, 05 Sep 2004 22:30:01 -0400

Haseeb Chaudhary wrote:
Hi All,

I'm looking at building Apache web servers on Solaris and/or Linux. I've been assigned the task of ensuring the build 
is secure against known vulnerabilities and attack types.

I'm a newbie to Apache and would greatly appreciate some links or advice on an easy way to securely build Apache web 
servers  - hopefully in a scripted way. The webservers will eventually go into production and will be facing the internet. I 
expect to place them behind Arrowpoint load-balancers.

All advice would really be appreciated!

thanks inadvance, Haseeb



SecurityFocus had an article recently about just that:
http://www.securityfocus.com/infocus/1694

Apache is a fairly complex piece of software and everyone tends to configure it differently but the article may get you started...

sd


Current thread: