https://wiki.evergreen-ils.org/ 2026-05-05T06:23:00+00:00 https://wiki.evergreen-ils.org/ https://wiki.evergreen-ils.org/lib/exe/fetch.php?media=wiki:logo.svg text/html 2022-02-10T18:34:57+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.evergreen-ils.org/doku.php?id=evergreen-admin:security:apache&rev=1644518097&do=diff User Comments Securing Apache (httpd) Right now, the main consideration is, SECURE THE /CGI-BIN! The only persons that need access to this directory are Evergreen system administrators. This directory should be restricted by both IP (to those workstations designated as Evergeen Administration systems), AND by Username/password AT THE LEAST. text/html 2022-02-10T18:34:57+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.evergreen-ils.org/doku.php?id=evergreen-admin:security:chopchop&rev=1644518097&do=diff User Comments jserver-c (chopchop) The main thing to remember about jserver-c ("chopchop") is that it currently has NO authentication. Any ol' user with a jabber client can essentially take over a mal-configured jserver-c server, and potentially compromise any systems using OpenSRF ( text/html 2022-02-10T18:34:57+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.evergreen-ils.org/doku.php?id=evergreen-admin:security:firewall&rev=1644518097&do=diff User Comments Security Considerations: Firewall In general, we recommend reading more about networking from starting points like Wikipedia and more authoritative sources on network security. Incoming ports Generally, there are about 4 zones you should have for your Evergreen system. These are as follows: