Apache server behind a proxy server

If you are using an apache server behind a proxy server, you may find that in your log files you will be given the proxy IP as the source IP of the connection. This is true, however you can adjust the apache log settings to pass the X-Forwarded-For […]

Apache commands

#!/bin/sh echo “————————” echo “Verify Configuration” echo “————————” /opt/apache/bin/httpd -f /opt/apacheconf/httpd.conf -t -S

echo “————————” echo “Start Apache” echo “————————”

/opt/apache/bin/httpd -f /opt/apacheconf/httpd.conf -k start

echo “————————” echo “List HTTP Processes” echo “————————” sleep 3 ps -ef | grep http

Custom script to stop Apache (stop_apache.sh) #!/bin/sh

echo “————————” echo “Stop Apache” echo […]

10 Apache Security and Hardening Tips

Tip No. 1: Disable Apache Signature and/or Apache Banner

# ServerSignature Off # ServerTokens ProductOnl

Tip No. 2: The Trace HTTP Request

Add the following to the web-server’s configuration file. For example alter the following file in Ubuntu: /etc/apache2/apache2.conf .

* TraceEnable off

Tip 3: Remove PHP scripts […]

PCI Compliance Disable ETags

PCI Compliance Disable ETags

To alleviate security risks arising from disclosure of information about files and their properties by Apache Web server, disable FileETag directive. For PCI Compliance it is required to disable ETags

Create a file at /etc/httpd/conf.d/no-etags.conf with the following:

Header unset ETag FileETag None

Then of course restart […]

Mod Security

Mod security has a default configuration file, and comes with a core rule set. The configuration works with include files which work for the modsecurity part like this:

httpd.conf | |– default-server.conf . . . . . . . . . set up the default server that replies to non-virtual-host requests | […]