Re: [us...@httpd] Hardening Apache against attacks

2010-10-26 Thread Jason Nunnelley
Why .htaccess? Security tip #1 should be 'disable .htaccess'. Performance tip #1 too. I'm not running a vhost clients can control. I'm running a vhost for production sites my dev team manages, and I don't always want my dev team restarting Apache to make changes. Also, .htaccess is in version

Re: [us...@httpd] Hardening Apache against attacks

2010-10-26 Thread Igor Galić
- Jason Nunnelley ja...@jasonn.com wrote: Why .htaccess? Security tip #1 should be 'disable .htaccess'. Performance tip #1 too. I'm not running a vhost clients can control. I'm running a vhost for production sites my dev team manages, and I don't always want my dev team restarting

RE: [us...@httpd] Hardening Apache against attacks

2010-10-25 Thread Assarsson, Emil
...@httpd] Hardening Apache against attacks I've done a few things already: blocked certain IP blocks, block know problematic user agents. I'm trying to collect a list of Apache and site hardening (.htaccess) methods. Please share your favorite. Jason N

Re: [us...@httpd] Hardening Apache against attacks

2010-10-25 Thread William A. Rowe Jr.
On 10/24/2010 3:47 PM, Jason Nunnelley wrote: I've done a few things already: blocked certain IP blocks, block know problematic user agents. I'm trying to collect a list of Apache and site hardening (.htaccess) methods. Please share your favorite. Allowing .htaccess is orthogonal to hardening

Re: [us...@httpd] Hardening Apache against attacks

2010-10-25 Thread Joost de Heer
On Sun, October 24, 2010 22:47, Jason Nunnelley wrote: I've done a few things already: blocked certain IP blocks, block know problematic user agents. I'm trying to collect a list of Apache and site hardening (.htaccess) methods. Please share your favorite. Why .htaccess? Security tip #1 should

[us...@httpd] Hardening Apache against attacks

2010-10-24 Thread Jason Nunnelley
I've done a few things already: blocked certain IP blocks, block know problematic user agents. I'm trying to collect a list of Apache and site hardening (.htaccess) methods. Please share your favorite. Jason N - The official