Basic Apache Server Hardening

These are few modules within Apache ( httpd ) daemon which are supposed to be commented with respect to various Security concern


Don't give away too much information about all the sub components  we are running. Comment out this line if you don't mind remote sites
finding out what major optional modules you are running and edit or comment it.

Hide OS and Apache Version

• ServerTokens OS    

           Make it  ---- ServerTokens Prod

• ServerSignature On

           Make it  ---   ServerSignature Off

Disable listing of Directories and Files

By default Apache Lists all directories within html directory

Append these lines within http.conf file to disable listing of directories and files

<Directory /var/www/html>
    Options -Indexes
</Directory>