• About Us/Policies
• Accounts
• Cable TV/Video
• Computing Services
• Computing Sites
• E-Mail
• Enterprise Apps
• Hardware
• Help
• Hosting/File Storage
• ID Cards
• IT Security
• IT Training
• Media Services
• Network Services
• New to MU?
• Printing
• Research Computing
• Software
• Student Phones
• Telecom Services

Best Practices: Apache Web Server

1. Only enable ports 80 and 443.

   • Along with port 22, only enable the Web server ports. It's a Web server, so it should serve the Web only.

2. Don't allow unnecessary users to log in.

   • Take steps to ensure that content isn't tampered with. Push updates to the server over a secure connection or even re-synchronize your content automatically.

3. Disable execution of Common Gateway Interface (CGI) programs (or scripts) on static content machines.

   • When there is no reason to execute CGI-type programs, disable the ability to do so. Removing this layer will not only protect the server, it may help performance.

4. Consider using chroot to start the Web server.

   • If the Web server user is compromised prevent any other access to the server with the use of chroot.