{"id":186,"date":"2017-08-26T11:40:52","date_gmt":"2017-08-26T11:40:52","guid":{"rendered":"https:\/\/d1m0.com\/?p=186"},"modified":"2017-09-11T11:53:24","modified_gmt":"2017-09-11T11:53:24","slug":"securing-web-servers","status":"publish","type":"post","link":"https:\/\/d1m0.com\/?p=186","title":{"rendered":"Securing web servers."},"content":{"rendered":"

Tips<\/p>\n

1.Hide apache version and OS identitty<\/p>\n

vim \/etc\/httpd\/httpd.conf<\/p>\n

\n
\n
ServerSignature <\/span>Off<\/span><\/div>\n
ServerTokens <\/span>Prod<\/span><\/div>\n<\/blockquote>\n<\/div>\n

2.Disable directory listing<\/p>\n

webhost config file<\/p>\n

\n
\n
<<\/span>Directory<\/span> \/<\/span>var<\/span>\/<\/span>www<\/span>\/<\/span>@@@<\/span>><\/span><\/div>\n
\u00a0\u00a0\u00a0\u00a0<\/span>Options<\/span> –<\/span>Indexes<\/span><\/div>\n
<<\/span>\/<\/span>Directory<\/span>><\/span><\/div>\n<\/blockquote>\n<\/div>\n

3.Disable Unnecessary Modules<\/p>\n

4.Use mod_security<\/p>\n

5.Turn off Server Side Includes and CGI Execution<\/p>\n

6.Limit Request Size<\/p>\n

7.Use only TLS, Disable SSlv2, SSlV3, Disable ssl conpression<\/p>\n

add in webhost config file<\/p>\n

SSLProtocol TLSv1.2
\nSSLCompression off<\/p>\n

8.Disable Weak chipers<\/p>\n

add in webhost config file<\/p>\n

SSLOptions +StrictRequire
\nSSLCipherSuite “HIGH:!aNULL:!MD5:!3DES:!CAMELLIA:!AES128”
\nSSLHonorCipherOrder on
\nSSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!RSA+3DES:!aNULL:!MD5:!DSS:!SSLv2:!3DES:!ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Tips 1.Hide apache version and OS identitty vim \/etc\/httpd\/httpd.conf ServerSignature Off ServerTokens Prod 2.Disable directory listing webhost config file <Directory \/var\/www\/@@@> \u00a0\u00a0\u00a0\u00a0Options –Indexes <\/Directory> 3.Disable Unnecessary Modules 4.Use mod_security 5.Turn off Server Side Includes and CGI Execution 6.Limit Request Size 7.Use only TLS, Disable SSlv2, SSlV3, Disable ssl conpression add in webhost config file SSLProtocol …<\/p>\n

Continue reading ‘Securing web servers.’ »<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-186","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/posts\/186","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/d1m0.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=186"}],"version-history":[{"count":4,"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/posts\/186\/revisions"}],"predecessor-version":[{"id":230,"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/posts\/186\/revisions\/230"}],"wp:attachment":[{"href":"https:\/\/d1m0.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=186"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/d1m0.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=186"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/d1m0.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=186"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}