httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Neelay Shah <asknee...@yahoo.com>
Subject [users@httpd] Securing Apache configuration
Date Thu, 11 Aug 2005 21:02:31 GMT
Hi guys,

I have two questions:

1. Is there any way I can specify in the config. file
for Apache that do not allow access to any directory
called 'foo' in my complete root...i.e. for e.g. if I
say 

 <Directory c:\MyRoot\*\foo>
  Order Deny,Allow
  Deny from All
 </Directory>

This will disable access to 'c:\MyRoot\Dir1\foo' but
if I had 'c:\MyRoot\Dir1\Dir2\foo' the web request
would go through...

Is there a way to disable access to 'foo' no matter
where it occurs in the directory tree below my Root
directory?

2. Is there a way for me to configure apache so as to
disable showing/following hard links...

Thanks,
  Neelay

  

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message