Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've been asked to expose our internal wiki to the world wide, which actions would you recommend me to take to secure the wiki from potential attacks? the wiki software is mindtouch.

few points I already raised:

  • secure it with ssl to prevent M.I.D attacks
  • put captcha mechanism on the login page for brute force attacks - is someone familiar with such plugin for mindtouch?
  • another password on apache level.

  • unfortunately VPN is not an option.

share|improve this question
up vote 3 down vote accepted

you can use modsecurity for apache, its an application firewall for HTTP, it protects against all kinds of attacks. its uses a signature/rule base mechanism and you can write your own rules.

share|improve this answer

Additional to captcha you can:

1.stopforumspam -

2.Wikimedia SpamBlacklist extension -

3.Restrict editing - allow auth users only

share|improve this answer
  1. install all available patches to the wiki. and subscribe to the wiki dev list to get notified on patches or security holes.

  2. harden all involved components that this wiki uses... e.g mysql

  3. double check the wiki contend for internal network/server information :-) and remove it.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.