HOW TO HARDENING APACHE 2.4.18 ON UBUNTU SERVER 16.04 LTS

Fisrt check the versions:

apache2 -v    # check version apache:
my result:  apache 2.4.18
lsb_release -a # check ubuntu version
my result: ubuntu 16.04.3 lts

1: Directory list disble

vi /etc/apache2/apache2.comf

change from:

 

<Directory /var/www/>

        Options Indexes FollowSymLinks

        AllowOverride None

        Require all granted

</Directory>

 

for:

 

<Directory /var/www/>

        Options Indexes FollowSymLinks

        AllowOverride None

        Require all denied

</Directory>

2:Apache version disable:

/etc/apache2/conf-enabled/security.conf

 

change from:

 

ServerSignature On

ServerTokens OS

for:

ServerSignature Off

ServerTokens Prod

3: Default Apache page disable

rename default page for old:

mv /var/www/html/index.html  /var/www/html/index.html.old