- Install apache2:
sudo apt-get install apache2
- Hide the Apache Version number, and other sensitive information:
sudo vi /etc/apache2/conf.d/security
ServerTokens Prod ServerSignature Off
- Turn off directory browsing:
sudo vi /etc/apache2/sites-available/default
<Directory /var/www/> Options -Indexes FollowSymLinks MultiViews AllowOverride None Order allow,deny allow from all </Directory>
- Follow this guide to install ModSecurity.
- Follow this guide to install ModEvasive.
No comments:
Post a Comment