0755 on directories 0644 on files

owned by apache:apache (or www:www, or www-data:www-data, or nobody:nobody). Whatever your distro uses.

That's more of a protection mechanism than anything.

--j