This book aims to teach you everything you need to know to build, install, and configure every aspect of Apache, the world's most popular Web server.

Two versions of Apache are available as of this book's publication. Apache 1.3 is still widely used and is continuously updated. Apache 2 offers new and powerful features, such as multi-processsing modules and filters, as well as a revised and expanded build system for compiling Apache from source. This book comprehensively covers both server versions, presenting up-to-date information and examples, and highlighting variations bettween the two releases in context.

In addition, this book is organized to provide solutions to common problems. It answers the questions that administrators like you typically ask, without requiring that you know the name of a specific Apache module or directive beforehand. This book also demonstrates multiple solutions to a problem, and contrasts the benefits and drawbacks of each approach. After readingPro Apache, you'll know not only how to get the results you want, but also why a solution works the way it does.

Finally, this book examines how to accomplish more advanced configurations, where individual features must cooperate with each other intelligently.

Now in its third edition, the expertise found inPro Apachemakes it the definitive guide to harnessing the power of Apache safely and securely.

A must-read for any system administrator installing or currently using Apache,Hardening Apacheshows you exactly what to do to make Apache more secure. Throughout this book, renowned authorTony Mobilyintroduces you to many of the security problems youll inevitably stumble across when using Apache—and most important, youll learn how to protect yourself and your server.

Mobily provides in-depth instruction on the safe installation and configuration of Apache and gives detailed guidance on tightening the security of your existing Apache installation. This comprehensive book covers a wide variety of the most important issues, including common attacks, logging, downloading, administration, cross-site scripting attacks, and web-related RFC details. The book also delves into many of the more advanced system administration techniques including“jailing” Apache and securing third-party modules.

Table of Contents

1. Secure Installation and Configuration
2. Common Attacks
3. Logging 
4. Cross-Site Scripting Attacks
5. Apache Security Modules
6. Apache in Jail
7. Automating Security

• Tomcat is the official reference implementation of Sun's servlet and JSP specifications, and Java developers must test all Web applications on Tomcat to ensure they work as designed
• Boasting more than 40 percent new and updated material, this book covers all the major new features affecting server administration and management
• Explores the additional built-in tools of Tomcat, which help Java developers program more efficiently, and looks at how Apache's other open source servlet/JSP technologies are designed to work with Tomcat
• Features full coverage of Release 6, which supports the latest JSP and servlet specifications: JSP 2.1 and Servlets 2.5
• Addresses solving real-world problems encountered during all phases of server administration, including managing class loaders and connectors, security, shared hosting and clustering, and system testing