Help Secure Your Server: Apache

  • Enable and Configure mod_security: a Web Application Firewall (WAF)

  • Enable and Configure mod_evasive: Denial of Service prevention (works w/local firewalls)

        DOSHashTableSize    3097
        DOSPageCount        20
        DOSSiteCount        100
        DOSPageInterval     1
        DOSSiteInterval     1
        DOSBlockingPeriod   10
  • Apply "SymLinksIfOwnerMatch" option to virtual hosts' document root*

        Options FollowSymLinks SymLinksIfOwnerMatch
    * - Apache symlinks restrictions are not true security, but it doesn't hurt to enable them