Walter Lee

how to disable directory listing in web 6.1SPx ?

Thursday Jun 11, 2009

If your security auditor said you need to disable the directory listing in your web 6.1SPx server, then you can do this in Admin GUI - Document Preferences - Directory Indexing - None. You can add an error response page too to send back when a request is asking for directory indexing.


The obj.conf will then look like below,


Service method="(GET|HEAD)" type="magnus-internal/directory" fn="send-error" path="/export/home/iws6.1sp9/docs/error.html"


then you can restart and take effect.


If you just comment out the default line below,


#Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"


Then the end-user will see a Method Not Allowed in the browser when they request a directory listing. They will not see the custom error page as above.







[0] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg
Comments:

Post a Comment:
  • HTML Syntax: NOT allowed