kieranbarnes these are the things i learnt today

Anonymous apache & PHP for cPanel

So I've started playing with cPanel/WHM recently. I've got to say it does make my life immensely easier, at, in my opinion, reduced security. So I'm working on security cPanel/WHM. Apart from the obvious, which I won't go into in this post, we'll make apache and PHP anonymous.

I spent a few hours messing with the easyapache script getting apache and PHP configured how I like on cPanel. No biggie. But I couldn't set some of my favourite security options.

First off, we'll anonymise apache.

From WHM, click Apache Setup under Service Configuration
Click Include Editor, under Pre Main Include select your apache version.
In the text box that appears insert

ServerSignature Off
ServerTokens Prod

Update and restart.

Your server signature will change from

Apache/2.x.x (Unix) mod_ssl/2.x.x OpenSSL/0.x.x mod_XXX/x.x PHP/x.x.x Server at www.premierseo.info Port 80

to

Apache Server at www.premierseo.info Port 80

It should keep the snoopers / automated attacks out for a while.

Next, we'll tell PHP not to expose itself for that extra bit of security.

From WHM, click PHP Configuration Editor under Service Configuration and then switch to Advanced View.
Find the expose_php and change it to "Off". Save.

Restart apache to be sure.

There we go. Simple steps in apache & php security.

Related posts:

1. Anonymous apache & PHP
   Like to be conspicuous? Like me. Then use the  ServerTokens and expose_php options. On a...
2. Enabling mod_deflate/gzip globally on cPanel
   There's far too many reasons to mention why you should enable mod_deflate to gzip your...
3. Installing mod_evasive on cPanel and/or Apache
   This guide details how to install mod_evasive on cPanel to help protect against DDOS attacks,...
4. mod_geoip Revisted including stopping spam in phpBB 2
   I've recently moved a client's forum onto a new cPanel server, previously it was on...
5. Apache, JungleDisk and Port 80
   I was tearing what little hair I have trying to solve a very strange bug...

What this article useful to you?

Let me know, buy me a beer!
Alternatively, if you're feeling impecunious, you may like to subscribe to my RSS feed, or see other articles in the cPanel/WHM category.