On 03/19/2011 11:09 PM, ASAI wrote:
Greetings,
I am hosting a domain with no website which is a gateway for several
applications. Directory indexes are turned off, however I noticed in
the logs today that one the directories which has no reference to the
outside world was probed. Is it possible that one can get the
directory listing of a host even when index listing is turned off
through some other agency?
How do I guard against things like this?
You'd have to provide sufficient proof that that is what is happening.
Apache does not log whether a directory listing was retrieved, or a
normal file - so how do you KNOW this ?
--
J.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
" from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org
