Check your Apache server status remotely…

Don’t want to login via SSH to check on an Apache Web Server?  This article explains how to setup the server status page.  One word of warning though.  This page is turned off by default for a reason.  It can be used by bad guys to determine all kinds of things about your server and makes you more vulnerable.  If as the article suggests you restrict the IP addresses you can partially mitigate it.  The best way to handle it is not to expose it to the internet at all.  Unfortunately if you are hosting remotely, like at Amazon Ec3 or Server Beach, you may have to use an SSH tunnel to secure it.  You could restrict it to an IP Address but remember that IP Addresses can be spoofed.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.