On 03/19/2011 11:09 PM, ASAI wrote:
Greetings,I am hosting a domain with no website which is a gateway for several applications. Directory indexes are turned off, however I noticed in the logs today that one the directories which has no reference to the outside world was probed. Is it possible that one can get the directory listing of a host even when index listing is turned off through some other agency?How do I guard against things like this?
You'd have to provide sufficient proof that that is what is happening.Apache does not log whether a directory listing was retrieved, or a normal file - so how do you KNOW this ?
-- J. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|