RE: Security for webserver behind router?

2005-01-20 Thread Ted Mittelstaedt
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Thanos Tsouanas Sent: Wednesday, January 19, 2005 11:46 PM To: freebsd-questions@freebsd.org Subject: Re: Security for webserver behind router? Just how much secure do you want to be? You can run

Re: Security for webserver behind router?

2005-01-20 Thread Thanos Tsouanas
On Thu, Jan 20, 2005 at 12:27:01AM -0800, Ted Mittelstaedt wrote: Just how much secure do you want to be? You can run apache chrooted in its directory. That basically means, that if apache is installed at /var/www/ , you can set it so that it isn't aware of anything that's not under

Re: Security for webserver behind router?

2005-01-20 Thread Eilko Bos
From the keyboard of Ted Mittelstaedt, written on Wed, Jan 19, 2005 at 11:25:00PM -0800: I am running Apache 1.3.33, as you suggest I should. You say as long as Apache is secure; what should I do to be sure that Apache is secure? Nothing, you nor nobody can do this. All you can do is

Re: Security for webserver behind router?

2005-01-20 Thread Dave McCammon
--- Eilko Bos [EMAIL PROTECTED] wrote: From the keyboard of Ted Mittelstaedt, written on Wed, Jan 19, 2005 at 11:25:00PM -0800: I am running Apache 1.3.33, as you suggest I should. You say as long as Apache is secure; what should I do to be sure that Apache is secure?

Re: Security for webserver behind router?

2005-01-19 Thread RW
On Wednesday 19 January 2005 07:21, Jay O'Brien wrote: I've brought up a 5.3 Release machine as a learning tool, with apache 1.3. It is on a LAN with Windows machines, and port 80 (and only port 80) is open and directed by the Linksys router to the FreeBSD machine. It is working fine so far,

Re: Security for webserver behind router?

2005-01-19 Thread Jay O'Brien
RW wrote: On Wednesday 19 January 2005 07:21, Jay O'Brien wrote: I've brought up a 5.3 Release machine as a learning tool, with apache 1.3. It is on a LAN with Windows machines, and port 80 (and only port 80) is open and directed by the Linksys router to the FreeBSD machine. It is working fine

Re: Security for webserver behind router?

2005-01-19 Thread Anthony Atkielski
Jay O'Brien writes: JOB Thanks, but what I want to know is what risk I have with port 80, JOB and only port 80 open. The risk depends on Apache, since that's the daemon answering the phone when someone calls in on port 80. Just make sure you're using the latest version of Apache (1.3.33, if

Re: Security for webserver behind router?

2005-01-19 Thread Jay O'Brien
Anthony Atkielski wrote: Jay O'Brien writes: JOB Thanks, but what I want to know is what risk I have with port 80, JOB and only port 80 open. The risk depends on Apache, since that's the daemon answering the phone when someone calls in on port 80. Just make sure you're using the

Re: Security for webserver behind router?

2005-01-19 Thread pete wright
On Wed, 19 Jan 2005 22:05:40 -0800, Jay O'Brien [EMAIL PROTECTED] wrote: Anthony Atkielski wrote: Jay O'Brien writes: JOB Thanks, but what I want to know is what risk I have with port 80, JOB and only port 80 open. The risk depends on Apache, since that's the daemon answering the

RE: Security for webserver behind router?

2005-01-19 Thread Ted Mittelstaedt
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jay O'Brien Sent: Wednesday, January 19, 2005 10:06 PM To: FreeBSD - questions Subject: Re: Security for webserver behind router? Anthony Atkielski wrote: Jay O'Brien writes: JOB Thanks

Re: Security for webserver behind router?

2005-01-19 Thread Thanos Tsouanas
On Thu, Jan 20, 2005 at 04:23:07AM +0100, Anthony Atkielski wrote: Jay O'Brien writes: JOB Thanks, but what I want to know is what risk I have with port 80, JOB and only port 80 open. The risk depends on Apache, since that's the daemon answering the phone when someone calls in on port 80.