-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue 2007-05-01 02:50:49 -0400, M. Fioretti wrote: > Am I right? If yes, what are the best tips, tricks and configuration > options (for apache and php) to make such a system as secure as > possible and as light on the cpu as possible? As a debian user, i can't comment on the FC packages or other packages, but i've been impressed with the debian apache2 packaging team's commitment to modularity. To reduce resources consumed and the risks of vulnerabilities, make sure that you disable as many modules as possible. In debian's apache2, you can see which modules are enabled by looking in /etc/apache2/mods-enabled. You can enable and disable modules with a2enmod and a2dismod, respectively. Don't take this too far, of course! enabling mod_ssl and configuring it properly will give you far better overall security than disabling it. Consider also how many php library extensions you have available and enabled in your php.ini (or followon configs). These modules will add to the overhead of any mod_php-produced page. In debian etch and later, most php5 extensions will install and load their configuration snippets in /etc/php5/conf.d/, though some still add lines to /etc/php5/apache2/php.ini. I'm sure you've seen other writeups about how to optimize apache, but i figure it's worth listing a few: http://www.debian-administration.org/articles/188 http://emergent.urbanpug.com/?p=60 http://www.debuntu.org/simple-apache-optimization-tips hth, --dkg -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Processed by Mailcrypt 3.5.8+ <http://mailcrypt.sourceforge.net/> iD8DBQFGN2SQiXTlFKVLY2URAi6eAKC+38qdaimJvpdZcd2qUhlZXrsxvQCfSmCs HnWDfC7h5dZLPqIRKF4jpCs= =U34A -----END PGP SIGNATURE----- ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ -- squirrelmail-users mailing list Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
