LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 11-19-2013, 01:05 PM   #31
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled

There are two main reasons to avoid the use of .htaccess files.

The first of these is performance. When AllowOverride is set to allow the use of .htaccess files, httpd will look in every directory for .htaccess files. Thus, permitting .htaccess files causes a performance hit, whether or not you actually even use them!
Also, the .htaccess file is loaded every time a document is requested.

I personally prefer using the .htaccess method as it allows me
1.) Quick editing
2.) No restarting of httpd/apache

but my DorkBlog is such a small thing and I don't have access to the conf where I'm hosted.

and I'm kind of lazy after years in IT.
 
1 members found this post helpful.
Old 11-22-2013, 07:31 AM   #32
newbie14
Member
 
Registered: Sep 2011
Posts: 646

Original Poster
Rep: Reputation: Disabled
Dear Habitual,
Since I prefer to go with the apache.conf file method so I just need to block this ip in my iptables rite. Is there anything else I can do further with the apache.conf for further hardening besides removing indexing, stop unused modules ?
 
Old 11-22-2013, 08:45 AM   #33
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
You can either,
1.) block it in your apache.conf (deny from ip.ad.dr.ess) OR
2.) block the same IP using iptables.

For further apache hardening, see references at https://www.linuxquestions.org/quest...1/#post2122954
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] http 404 error ansrewdps Linux - Server 11 02-08-2011 10:48 AM
[SOLVED] Error: 0516-404 allocp mufy AIX 1 02-04-2010 01:02 AM
Is a 404 error a server issue? M$ISBS General 2 05-13-2007 11:22 AM
wget 404 error BarryM45 Linux - General 2 10-12-2004 05:12 AM
(404)error johncla Linux - Networking 1 03-25-2001 06:09 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 04:26 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration