Red Hat NETWORK PROXY SERVER 3.7 - Manuel d'utilisateur télécharger pdf (Page 28)

18 Conﬁguring Your Secure Web Server

2.2.1 Important Directives in httpd.conf

LoadModule LoadModule is used to load in Dynamic Shared Object

(DSO) modules. More information on the secure web server’s DSO

support, including exactly how to use the LoadModule directive,

can be found in section 2.5 on page 34.

AddModule AddModule is the directive used by the secure web server

to create a complete list of all available modules. You will use the

AddModule directive if you add your own module in as a DSO. For

more information on how AddModule is used for DSO support, see

section 2.5 on page 34.

HostnameLookups HostnameLookups can be set to on or off. If you

allowHostnameLookups (by settingit toon),your server will auto-

matically resolve the IP address for each connection which requests

a document from your web server. Resolving the IP address means

that your server will make one or more connections to the Domain

Name System (DNS) in order to discover the hostname that corre-

sponds to a particular IP address.

Generally, you should leave HostnameLookups set to the default

setting of off,because they add a load to your server and may slow

it down. If your server is busy, the effects of HostnameLookups

may be especially noticeable.

HostnameLookups are also an issue for the Internet asa whole. All

of the individual connections made to look up each hostname add

up to signiﬁcant trafﬁc on the Internet. Therefore,for your own web

server’s beneﬁt, as well as for the good of the Internet as a whole,

you should leave HostnameLookups set to off.

User The User directive sets the userid used by the server to answer

requests. User’s setting determines the server’s access. Any ﬁles

inaccessible to this user will not be accessible to your web site’s vis-

itors. For security reasons, the User should only have privileges so

that itcan accessﬁles which aresupposed tobe visibleto the outside

world.

The User is also the owner of any CGI processes spawned by the

server. The User should not be allowed to execute any code which

is not intended to be in response to httpd requests. The default for

User is nobody, an unprivileged user.

1 2 ... 23 24 25 26 27 28 29 30 31 32 33 ... 100 101

Pas de commentaire

Red Hat NETWORK PROXY SERVER 3.7 - Manuel d'utilisateur Page 28