Apache Webserver security and optimization tips

Question

I\'m about to deal with managing and running my first Internet connected Apache webserver and I was wondering if there are any sys admins and developers out there that would lik

Answer 1

• Ensure the Apache process isn't running as root.
• Be sure to be on the latest stable release
• If the box is directly connected to the internet ensure you have thought about all other services, like ssh.
• Carefully inspect your local firewall rules, tighten it down. (See iptables)
• Don't turn on options you don't understand or don't plan to use
• Consider subscribing to an Apache security mailing list so you'll learn right away of any critical patches