| 1 | ############################################################################ |
| 2 | ## $Id: apache.conf.in.dist,v 1.8 2003/08/09 18:01:39 ehood Exp $ |
| 3 | ## Description: |
| 4 | ## The following are template/example Apache configuration |
| 5 | ## directives that apply to the mail archives. |
| 6 | ## |
| 7 | ## IMPORTANT: MAKE SURE TO REVIEW THE DIRECTIVES HERE IF |
| 8 | ## USE THIS FILE AGAINST ANY SECURITY CONCERNS |
| 9 | ## YOU MAY HAVE. |
| 10 | ############################################################################ |
| 11 | |
| 12 | <IfModule mod_alias.c> |
| 13 | # Uncomment and change the following if ROOT_URL in config.sh |
| 14 | # is not already directly accessible from a web client. |
| 15 | #Alias @@ROOT_URL@@ "@@SW_ROOT@@" |
| 16 | |
| 17 | # Enable mharc CGI programs. Alternate enabling method is |
| 18 | # defined below. |
| 19 | ScriptAlias @@CGI_URL@@/ "@@CGI_DIR@@/" |
| 20 | </IfModule> |
| 21 | |
| 22 | <Directory @@SW_ROOT@@> |
| 23 | AllowOverride All |
| 24 | |
| 25 | Options MultiViews Indexes FollowSymLinks |
| 26 | IndexOptions FancyIndexing NameWidth=* SuppressSize SuppressLastModified |
| 27 | |
| 28 | # Make sure namazu index files are not visible in directory listings |
| 29 | IndexIgnore NMZ.* |
| 30 | |
| 31 | # Deny access to files that we probably do not want the public to |
| 32 | # see. The main one is .mhonarc.db files, especially if we have |
| 33 | # mail address obfsucation in the HTML archives. |
| 34 | <Files ~ "^(NMZ|\.proc|procmail|msgid.cache|.mhonarc.db|config\.sh|lists\.def)"> |
| 35 | Order allow,deny |
| 36 | Deny from all |
| 37 | </Files> |
| 38 | |
| 39 | # Deny access to log files |
| 40 | <Files ~ "\.log$"> |
| 41 | Order allow,deny |
| 42 | Deny from all |
| 43 | </Files> |
| 44 | |
| 45 | # Deny access to temporary incoming mail file used by filter-spool |
| 46 | <Files ~ ".newmail$"> |
| 47 | Order allow,deny |
| 48 | Deny from all |
| 49 | </Files> |
| 50 | |
| 51 | # Limit the types of HTTP methods allowed |
| 52 | <Limit GET POST OPTIONS PROPFIND> |
| 53 | Order allow,deny |
| 54 | Allow from all |
| 55 | </Limit> |
| 56 | <Limit PUT DELETE PATCH PROPPATCH MKCOL COPY MOVE LOCK UNLOCK> |
| 57 | Order deny,allow |
| 58 | Deny from all |
| 59 | </Limit> |
| 60 | </Directory> |
| 61 | |
| 62 | # Enable CGI execution for cgi-bin directory. This is probably not |
| 63 | # necessary if the above ScriptAlias directive is used. |
| 64 | <Directory @@SW_ROOT@@/cgi-bin> |
| 65 | Options +ExecCGI |
| 66 | <IfModule mod_mime.c> |
| 67 | AddHandler cgi-script .cgi |
| 68 | </IfModule> |
| 69 | </Directory> |
| 70 | |
| 71 | # Browsing access to raw mail archives. |
| 72 | <Directory @@MBOX_DIR@@/*/> |
| 73 | AllowOverride All |
| 74 | Options Indexes FollowSymLinks |
| 75 | IndexOptions FancyIndexing SuppressDescription |
| 76 | </Directory> |
| 77 | |