public marks

PUBLIC MARKS from camel with tags web & secure

August 2008

Running Vhosts Under Separate UIDs/GIDs With Apache2 mpm-peruser On Debian Etch | HowtoForge - Linux Howtos and Tutorials

by 1 other (via)
This article explains how you can install and configure apache2-mpm-peruser on a Debian Etch server. apache2-mpm-peruser is an MPM (Multi-Processing Module) for the Apache 2 web server, very similar to apache2-mpm-itk, but faster (almost as fast as apache2-mpm-prefork). mpm-peruser allows you to run each of your vhosts under a separate UID and GID - in short, the scripts and configuration files for one vhost no longer have to be readable for all the other vhosts. It is based on metuxmpm, a working implementation of the perchild MPM. The result is a sane and secure web server environment for your users, without kludges like PHP's safe_mode.

March 2008

Set Up Gateway Level Virus Security With ClamAV And SafeSquid Proxy | HowtoForge - Linux Howtos and Tutorials

In this HowTo, I will explain how you can secure your network from virus and other malware, by installing ClamAV and integrating it with SafeSquid, to scan all in-coming content for virus, and block all infected content at the HTTP Gateway, even before it enters your network. Virus Security In SafeSquid SafeSquid has built-in connectivity to various daemon based anti virus software like ClamAV, Sophos, Avast, F-Prot, NOD32 and Kaspersky. It also has a universal ICAP (Internet Content Adaptation Protocol) client that can be used to connect to ICAP based security software like Dr.Web ICAP, Kaspersky Antivirus for Proxy Server, Trend Micro InterScan Web Security and Symantec Scan Engine. You can even use multiple anti virus software with SafeSquid to simultaneously scan in-coming content. This does not cause any significant latency, since SafeSquid has a multi-threaded architecture.

October 2007

OAuth — An open protocol to allow secure API authentication in a simple and standard method from desktop and web applications.

by 13 others (via)
An open protocol to allow secure API authentication in a simple and standard method from desktop and web applications.

September 2007

SSL-enabled Name-based Apache Virtual Hosts with mod_gnutls

by 1 other
his article describes how to implement SSL-enabled name-based vhosts - that is secure virtual hosts which share the same IP address and port - with the SNI-capable mod_gnutls module for Apache’s httpd web server.