A very nice article going into detail on how to secure the Apache environment.
Most security violations are the result of bad configuration. You should configure your server to run with the minimum level of authorization required for clients to work effectively. For example, if you need to provide access only to certain hosts, configure Apache to listen to requests from only those hosts by editing your httpd.conf file.
Listen to the words of this wise man. Of course if you are administering a server you should know these things anyways, but it’s always good to refresh the memory.
