chroot

Howto Secure Apache

Use the latest and most current version. Right now the latest is the Apache 2.2 series
Make sure you’ve installed all the latest security patches
Hide the Apache Version number, and other sensitive information
Make sure apache is running under its own user account and group
Ensure that files outside the web root are not served
Turn off directory browsing (mod_autoindex)
Turn off server side includes (SSI)
Turn off CGI execution
Don’t allow apache to use symbolic links
Turning off multiple Options
Turn off support for .htaccess files
Use the Apache mod_security
Disable all unnecessary modules
Make sure only root has read access to apache’s config and binaries
Lower the Timeout value
Limiting large requests
Limiting Concurrency
Restricting Access by IP
Adjusting KeepAlive settings
Run Apache in a Chroot environment

Feel free to post suggestions or corrections