segunda-feira, 11 de setembro de 2017

HOW TO HARDENING APACHE 2.4.18 ON UBUNTU SERVER 16.04 LTS

Fisrt check the versions:

apache2 -v    # check version apache:
my result:  apache 2.4.18
lsb_release -a # check ubuntu version
my result: ubuntu 16.04.3 lts

1: Directory list disble

vi /etc/apache2/apache2.comf

change from:

 
<Directory /var/www/>
        Options Indexes FollowSymLinks
        AllowOverride None
        Require all granted
</Directory>


 
for:

 
<Directory /var/www/>
        Options Indexes FollowSymLinks
        AllowOverride None
        Require all denied
</Directory>
2:Apache version disable:

/etc/apache2/conf-enabled/security.conf
 

change from:
 
ServerSignature On
ServerTokens OS

for:
ServerSignature Off
ServerTokens Prod

3: Default Apache page disable

rename default page for old:
mv /var/www/html/index.html  /var/www/html/index.html.old

Nenhum comentário:

Postar um comentário