Tag Archives: web server

February, 2010

• 25 February

  Monitor Apache web server with mod_status

  Problem: Apache HTTP Server on a web hosting system will undoubtedly run multiple virtual hosts. Each of those virtual hosts logs its activity in a separate location making it impossible to effectively monitor each log and each virtual host for errors or security issues. Solution: Use mod_status to monitor Apache’s …
• 23 February

  How to install Nginx via YUM in CentOS

  Nginx (pronounced “Engine X”) is a lightweight web server that offers speed and flexibility without all of the extra features that larger web servers like Apache offer. Although it is a free and open source application, CentOS does not offer the latest version in its default YUM repository. To install …
• 18 February

  Test Windows Server 2008 with MBSA

  Microsoft provides a tool for Windows Server 2008 that tests for security misconfiguration. It comes with a graphical interface and a command line interface for both local and remote scans. It looks for vulnerabilities, performs assessment checks, and checks SQL Server 2005. In addition to Windows Server 2008, MBSA runs …
• 18 February

  Test your server load with curl-loader

  It is very difficult to test a server’s real-world performance under stress. While you could hire a company or individual to bombard your server, the cost involved may not be worth the results. The open source application called curl-loader simulates load and application behavior of thousands of HTTP/HTTPS and FTP/FTPS …
• 3 February

  Web server round-up

  Over the past year, we have discussed several web servers. For your convenience, here is a quick list of each one we have already mentioned, as well as a couple we did not, including links to their project sites. Apache – This is the most widely used and the one …

January, 2010

• 27 January

  How to restart Apache in Mac OS X Server

  Question: How do I restart Apache HTTP Server on a Mac OS X server? Answer: Linux other Unix-based servers, you can start and stop Apache from the command line. If you are familiar with Redhat-based systems, then you are used to logging in and then using “su” to become Root. …
• 26 January

  Wikto web server assessment tool

  Yesterday, we took a look at a web application security testing tool, and there are many other tools like it available both for a fee and for free. But there are not many tools available that actually test the web server itself and even fewer that are designed to test …
• 25 January

  Find security holes in web applications with Powerfuzzer

  Any security-minded system administrator has heard of cross site scripting (XSS). It might even keep you up at night, but there are steps you can take to identify vulnerabilities in your websites and deal with them. One method of finding vulnerabilities is to use fuzz testing (the insertion of random …
• 22 January

  Apache's DocumentRoot directive

  Apache HTTP Server gives you the flexibility to decide where you want to store the web-accessible files for your websites. Most operating systems have their own unique directory structure for their default web server installations, but even those can be changed. The Apache default document root is /usr/local/apache/htdocs. To change …
• 19 January

  How to install Apache on a FreeBSD server

  Continuing with our series this week on non-Linux operating system servers, today we will learn about FreeBSD. Its proponents (of BSD distributions in general) call it the most secure and reliable operating system for Internet-connected servers. It comes with several different versions of Apache. Here is a quick guide to …