How to Tuning Your Apache Server

Tools There are a variety of tools that can assist in determining if you need to alter resource settings, including the top command and the load-testing program Siege. Linode’s own Longview service...

Apache 2.4 Web Server on Debian 8 (Jessie)

Before You Begin To check your hostname run: The first command should show your short hostname, and the second should show your fully qualified domain name (FQDN). Update your system: Install Apache Install...

How to disable Apache HTTP OPTIONS method

OPTIONS is not really vulnerability but since there is no real use for it and ideally should be disabled. Hope you have already disabled the TRACE Method on your Apache configuration with...

Apache – GET/POST Security

Below is a useful code to block out some common exploits for GET/POST values with .htaccess Simply add the code to your /public_html/.htaccess file:  

Bad Bots and Spider list

Below is a useful code block for blocking a lot of the known bad bots and site rippers currently out there. Simply add the code to your /public_html/.htaccess file:  

Apache – .htaccess Security

Below you see a list of the important rules that you can add to your .htaccess file to harden security, by greatly limiting the exposure of your website to many types...

How-to – Apache2 – LimitRequests reached

If the Apache Error Log file displays the following error (debug mode), may need to change the Request Line/Request Fields/Request Field Size, Request Body limit values. Name LimitRequestLine Synopsis This directive sets the number of bytes from 0...

How-to – Apache2 – Request header/Request body timeout

If the Apache Error Log file displays the following error (debug mode), may need to change the timeout values ​​within the Apache's reqtimeout module located in /etc/apache2/mods-enabled (Debian/Ubuntu). Restart the Apache service...

How-to – Apache set the debug mode LogLevel

To solve some issues (POST and GET troubles), try to set the LogLevel in debug mode. Open /etc/apache2/apache2.conf file (for Debian installation) and modify the following line: to Restart the service when modified.

How-to – Verifiy if Apache running as prefork or worker

To verify if Apache running as prefork or worker, do the following command: Here we find the module worker.c, hence I'm running the worker MPM.