• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Any good links on Apache security?

timvek

n00b
Joined
Feb 24, 2006
Messages
9
I'm going to have Apache running here on my LAN, and just want to be sure, before it goes live, that all security holes are plugged (the known ones, anyway). Anyone know some good links I can read to make sure I have this thing buttoned down?

Thanks,
K
 
while researching how to get surgemail webmail running on my server alongside apache, surgemail suggested doing a ProxyPass...which requires a proxy module to be loaded. Another site I went to said that using Proxy might not be such a good idea in terms of security.
http://httpd.apache.org/docs/1.3/mod/mod_proxy.html#proxyrequests
granted it looks like those come from the 1.3 version of apache and I run 2.0.5...I'm still going to steer away from it.
 
So...can I assume form the lack of replies that Apache is pretty well buttoned down right out of the box?

K

 
Back
Top