Apache Hardening: Eliminate unneeded Apache modules (Part 2)

Security - Blog Last week, I began listing default Apache modules which can be disabled from the point of view that we are using Apache as a front end to Apache Tomcat web application container and don’t need Apache to interface with other CGI languages. All requests are forwarded to Tomcat and Apache is only taking care of the SSL handshake for us. If a module isn't loaded, make sure any configuration of the non-loaded module is commented out as well or Apache will fail to start. Since we are only using Tomcat as an application container, we can disable the following modules: LoadModule asis_module modules/mod_asis.so · used to send any kind of data from the server, including redirects and other special HTTP responses, without requiring a cgi-script or an nph script. · see: http://httpd.apache.org/docs/2.0/mod/mod_asis.html LoadModule isapi_module modules/mod_isapi.so · used to pass requests to Windows server extensions written in Dynamically Linked Libraries (DLLs). · see: http://httpd.apache.org/docs/2.0/mod/mod_isapi...