Hello forum,

Whenever I type in my IP address or local domain name in my browser (http://myipaddress), my entire directory tree shows up in the browser. Normally I would not mind this behavior but I am networking my main computer through a router and if anybody within the range of the router types in my IP address in their browser (using their computer), I think they too will be able to access every file on my computer. How do I disable this?

I am running Linux Mint 9 (based on Ubuntu Lucid) and Apache2. I would rather just be limited to using Nautilus to connect to the HTTP server using a password.

Help will be appreciated,
Roy

*every* file?? if that's the case then you're doing something far more wrong than enabling indexing. In order to answer your actual question, you would ensure that the Options directives do not include "Indexes" and that would cover it. However based on what you're saying is happening, doing that is really a trivial thing compared to the other huge security issues you are already exposing yourself to. the *entire* filesystem?? How??

Hello Chris,

I really did not understand the basics when I configured Apache2 but I got help from Googling the Internet. But honestly, I do not know how I managed to accomplish this behavior but the entire directory tree, including mounted drives in /media, shows up in the browser by typing http://myipaddress .

I might just disable Apache2 and stick with ssh or sftp.

I'm still open for suggestions.

All the best,
Roy

if you aren't serving a website, then you should not use a web server, regardless of simplity etc. ssh / sftp / sshfs is a great way to achieve remoted file access, and i'd certainly recommend that over a webserver.

I fixed my problem by putting a minus sign "-" in front of the word "Indexes" for the Options line in httpd.conf and everywhere else it showed up.

I also noticed that DocumentRoot was set to "/" and <Directory "/"> was set in httpd.conf. I think that is what caused the problem in the first place.

All the best,
Roy