Savannah W-ITS

I previously posted about using the mod_geoip Apache module to control web access via .htaccess files or server configuration adjustments (i.e. editing httpd.conf.)   Here we are adding the mod_security Apache module into the mix.
Wait!  if we can control access via mod_geoip why do we need mod_security?
The simple answer is….  you don’t need it – but [...]

The GOOD news – using the GeoIP module (mod_geoip.c.) can be quite simple.  The module provides much more than simply a relatively easy means to manage web server access – it opens up some opportunities for data mining.
The BAD news – when limiting access make sure that this is what you really want/need to do [...]

This post covers quite a bit of ground and may not be appropriate for novice web masters.  If you have shell level access to your web server then you *may* be able to experiment with the httpd.conf approaches.   Otherwise the .htaccess information may be useful.
When migrating from Apache 1.x to Apache 2.x a number of [...]

Web server security is something that we all want, but usually, we only want it when it is convenient. (This also applies to other parts of our lives when security is a factor.)

Convenience for us usually means:

• that there is a simple login process
• that server settings and pages are easy to change, maintain, and update.

Convenience for our site visitors usually means that a web visitor can easily access your web pages