Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have web server (debian lenny, standard LAMP). We have few tools useful for server monitoring/administration with web interface (phpMyAdmin,APC opcache monitor,serverstats,phpinfo...) and we would like limit access to them only for server admins. So I created apache virtual which has allowed access from localhost only. Server admins then make SSH tunnel to server. Virtual host:

<Directory /var/www/localhost/www/>
   order deny,allow
   deny from all
   allow from

    ServerName localhost
    DocumentRoot /var/www/localhost/www
    DirectoryIndex index.html index.htm index.php

My question is - is this reasonably safe? We do not use iptables/firewall. I know I can use SSL + http authentication also/instead.

share|improve this question
up vote 1 down vote accepted

I think this is reasonably secure. I think in this case you don't need a firewall for this. But you should still be sure you're properly securing SSH.

share|improve this answer

Yes, seems safe to me, but you should use your firewall to be really sure. It's his dedicated job to accept or refuse connections depending on their original address.

I usually close every port except SSH and then install NXserver. You can even generate a specific client certificate to make sure only allowed clients who are in possession of this certificate and of a valid account on the server can login (you can also just use the SSH authentication). Of course you can do this directly with SSH but I find it easier with NX. This also speeds up the X display since NX is globally an optimized X client library.

NX and debian

share|improve this answer
Thanks for advice. But I do not use X server, so NXserver is overkill for me. – Stepan Sep 27 '10 at 11:35

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.