[TriLUG] Apache2

[David Brain]

Or just RNAT it  - however if you don't trust your webadmin..it might
just be time to look for a new webadmin.  The security exposure
increases significantly once someone has a login to the box, the
number of vulnerabilities that are 'local privilege escalation' are
considerably higher than the 'remote exploits'.

David.

On 8/21/07, Patrick Brewer <patwbrewer at yahoo.com> wrote:
> Well if you don't trust your webadmin, and you want the convenience of port 80, you could set up a simple apache server on port 80 that just proxies traffic to a second apache server that doesn't run as root on something like 8080 and give your webadmin control over the second non-root server.  Makes things more complicated, but secure.
>
>
>
> ---------------------------------
> Be a better Globetrotter. Get better travel answers from someone who knows.
> Yahoo! Answers - Check it out.
> --
> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG Organizational FAQ  : http://trilug.org/faq/
> TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
>