3
votes
1answer
401 views

Blacklist IP addresses based on number of 404s in Apache

I'm getting a lot of hackers spamming my domain with requests for files that just don't exist. This is eating up a lot of my allotted bandwidth and I'd like to blacklist these IP addresses. Is there ...
6
votes
1answer
2k views

How to secure a ActiveMQ?

Does anybody have experience with securing/hardening ActiveMQ? Check lists or guides would be welcome.
5
votes
2answers
2k views

Implications of Trace/Track Methods on Apache

When performing vulnerability scans using Nessus, against a host running Apache, one expected result is always "HTTP TRACE / TRACK Methods Allowed". While this result only has a base CVSS of 4.3, I ...
58
votes
12answers
10k views

Apache Server Hardening

What are some best practices, recommendations, required reading for securing an Apache Server?