Quick question in regards to local development and securing apache2

jwhitworth · 02-20-2013, 07:49 PM

Hello all...I've just installed apache2,mysql,and php on my local linux mint machine for development purposes. The server is using localhost for the ip address and I have yet to configure anything else on this setup...it's virgin lol...My question to you is:
"Is it possible for someone else to navigate to this server across the web, and if so how would they go about doing it, and how could I stop (or potentially stop) this?"

I've had some experiance setting up servers remotely through ssh and have used xampp on a local windows environment for local development before, but this is the first time I've setup a local development environment on a linux box and am wanting to make sure I don't leave some hugely obvious security hole wide open...so I'm not a total noob, but I will admit to lacking a bit in some fundamental networking skills (programmer by profession lol).

Any replies are greatly appreciated guys/gals!

Habitual · 02-20-2013, 09:08 PM

Code:

Order Allow,Deny
Deny from All
Allow from ip.add.res.s

in either your httpd.conf if you have access to it, or .htaccess in "your" DocumentRoot if you don't. Does not require restarting http daemon.

see http://corz.org/serv/tricks/htaccess.php

NOTE: I hope you have a router or similar, else, http may be "open" to the world "across the web"
The snippet will stop anyone NOT in allow from entry and can be CIDR addressing format as well.

Ask if you have more questions.