The Order directive for all DocumentRoot directives should be configured appropriately. (1) Allow,Deny / Deny,Allow / Mutual-failure (1) Apache configuration file: Order directive (in DocumentRoot Directory directive) 1.7 Restricting Access p15 Security Configuration Benchmark For Apache Web Server CIS 2008-11-01 Version 2.2.0 Prose (PDF)