Re: [ossig] Apache2 Newb Q

[Reign226 <reign226@xxxxxxxxxxxx>]

Yo,

  Yeah, got everything up and running fine. I'm using No-IP's Dynamic IP 
service and it updates quite fast...almost real-time. I don't think I 
want to venture towards setting up my own DNS server yet *shudders* 
because I've already got enough problems installing hacks into phpbb and 
NOT getting at least ten lines of debug code every single time I add 
something.

  BTW, do you guys have any suggestions on setting up a mail-server? 
phpbb keeps bugging me for one. How would the mail-server work? Please 
briefly walk me through the steps required. (Btw, running WinXP Pro here).

  Thirdly, any tips on locking down my computer/server? I removed 
Directory Indexing from Apache2 already and there's nothing sensitive in 
my htdocs folder anyway. However, I noticed that Apache2 might have 
opened port 21 and 23 on my system (it wasn't open before) and I tried 
connecting anonymously to 21 but I am actively refused, so I left it at 
that. Any suggestions on how to close em?

  In an unrelated note, if somebody explicitly downloads a .php file 
from my webserver, would it be a version parsed by PHP on my system or 
would it be the complete with the original source-code and everything? 
I'm worried about this because I have a .php doc that stores a MySQL 
database password.

  Which leads me to the next question of securing MySQL. I've binded 
MySQL to localhost so it will only listen on localhost. Since nobody can 
remotely access my database now (i hope), is this enough to deter most 
hackers? Also, I have a version of PHP running, but I haven't done 
anything to secure it.

Howard

Gan Sze Kai wrote:
> HI,
> How your apache now? To get a fast update to your server IP address 
> changed, you can try to setup a internal DNS.
>  From my experience, to update your server IP address (Public address) 
> with take a while (depend on the DNS setting). You can ask ISP about the 
> DNS thingy.
> 


---------------------------------------------------------
To unsubscribe: send mail to ossig-request@mncc.com.my
with "unsubscribe ossig" in the body of the message