Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've been asked to expose our internal wiki to the world wide, which actions would you recommend me to take to secure the wiki from potential attacks? the wiki software is mindtouch.

few points I already raised:

  • secure it with ssl to prevent M.I.D attacks
  • put captcha mechanism on the login page for brute force attacks - is someone familiar with such plugin for mindtouch?
  • another password on apache level.

  • unfortunately VPN is not an option.

share|improve this question

3 Answers 3

up vote 3 down vote accepted

you can use modsecurity for apache, its an application firewall for HTTP, it protects against all kinds of attacks. its uses a signature/rule base mechanism and you can write your own rules.

http://www.modsecurity.org/projects/modsecurity/apache/

share|improve this answer

Additional to captcha you can:

1.stopforumspam - http://www.mediawiki.org/wiki/Manual:Combating_spam

2.Wikimedia SpamBlacklist extension -http://www.mediawiki.org/wiki/Extension:SpamBlacklist

3.Restrict editing - allow auth users only

share|improve this answer
  1. install all available patches to the wiki. and subscribe to the wiki dev list to get notified on patches or security holes.

  2. harden all involved components that this wiki uses... e.g mysql

  3. double check the wiki contend for internal network/server information :-) and remove it.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.