Differences between version 20 and revision by previous author of ApacheNotes.
Other diffs: Previous Major Revision, Previous Revision, or view the Annotated Edit History
| Newer page: | version 20 | Last edited on Friday, January 28, 2005 9:11:59 am | by JohnMcPherson | Revert |
| Older page: | version 18 | Last edited on Monday, October 4, 2004 4:47:56 pm | by AristotlePagaltzis | Revert |
@@ -26,11 +26,8 @@
__Chroot prisons__:
Running in a chroot prison limits the damage than can be done should an application be compromised. See [chroot(2)] for details. Apache2 has better support for this.
See also:
- * [HowToSecureProgramsHOWTO]
- * [HowToSecurityQuickstartHOWTO]
- * [HowToSecurityHOWTO]
* [http://httpd.apache.org/docs/misc/security_tips.html]
<br>
__FireWall~ing [Apache]__:
@@ -43,9 +40,55 @@
!!! Extra information in directory listings
You can have additional information displayed at the top and bottom of a <tt>mod_autoindex</tt> directory listing by putting the text in a file called <tt>HEADER</tt> and <tt>README</tt>, respectively. Either file can any have FileExtension (or none). To enable this feature, you will need <tt>~MultiViews on</tt> to be in effect for that request.
+
+
+!!! Apache and [IPv6]
+Tell apache to listen on "::", which is the ipv6 version of 0.0.0.0, on whatever port. Eg, in httpd.conf:
+<verbatim>
+ Listen :::80
+ BindAddress ::
+</verbatim>
+
+If you want a ~VirtualHost available on both IPv4 and IPv6, then give it a name that resolves to both a v4 and v6 address. It won't work if you give use a name that doesn't have a v6 address, and then try to use ~ServerName or ~ServerAlias. Eg:
+
+<verbatim>
+$ host wlug.org.nz
+wlug.org.nz A 203.97.10.50
+$ host -t aaaa wlug.org.nz
+wlug.org.nz AAAA record currently not present
+$ host -t a www.wlug.org.nz
+www.wlug.org.nz CNAME hoiho.wlug.org.nz
+hoiho.wlug.org.nz A 203.97.10.50
+$ host -t aaaa www.wlug.org.nz
+www.wlug.org.nz CNAME hoiho.wlug.org.nz
+hoiho.wlug.org.nz AAAA 2002:CB61:A32:0:0:0:0:1
+</verbatim>
+
+!Doesn't Work:
+<verbatim>
+<VirtualHost wlug.org.nz:80>
+ ServerName www.wlug.org.nz
+ ServerAlias wlug.org.nz
+ ServerAlias www2.wlug.org.nz
+...
+</verbatim>
+
+(Apache can't resolve wlug.org.nz to an IPv6 address, so this vhost won't be available via ipv6.)
+
+!Does work:
+
+<verbatim>
+<VirtualHost www.wlug.org.nz:80>
+ ServerName www.wlug.org.nz
+ ServerAlias wlug.org.nz
+ ServerAlias www2.wlug.org.nz
+...
+</verbatim>
+
+
!!! See also
* NameVirtualHosting
* ModBackhand
