I would also go with Apache. Also, you can do things to help to mitigate against potential vulnerabilities, such as limiting access to the webserver by IP address, or using ssh port forwarding which would eliminate the need to have the webserver accessible from anywhere other than localhost...the latter though doesn't mitigate against possible ssh vulnerabilities, but I'm assuming your using ssh to administer the box anyway.
Aaron On Thu, May 14, 2009 at 7:37 AM, <[email protected]> wrote: > > On May 14, 9:51 am, [email protected] wrote: >> Question: >> What webserver is recommended form the point of view of security? > > I would go for a plain apache. Apache has a bigger user base and a > solid reputation. If something comes out on apache a bigger target > than you will be hit first and a patch will be released very quickly > giving you time to patch or react before someone may even consider > targeting your OSSEC install. > >
