Web security planning - routing

Routing should not be enabled on a production web server.