Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

How to hide Apache web server header signature?

102 views
Skip to first unread message

N.B.

unread,
Mar 12, 2002, 10:40:22 PM3/12/02
to
I am running Apache 1.3.20 on Linux , when I do a port scan it shows up
exactly what version of Apache I am running. Is there a way to hide this
information from web server header?

N.B.


Charles E. Pelkey

unread,
Mar 13, 2002, 8:21:02 AM3/13/02
to
Try these directives:

ServerSignature directive
Syntax: ServerSignature On|Off|EMail
Default: ServerSignature Off
Context: server config, virtual host, directory, .htaccess
Status: core
Compatibility: ServerSignature is only available in Apache 1.3 and later.
The ServerSignature directive allows the configuration of a trailing footer
line under server-generated documents (error messages, mod_proxy ftp
directory listings, mod_info output, ...). The reason why you would want to
enable such a footer line is that in a chain of proxies, the user often has
no possibility to tell which of the chained servers actually produced a
returned error message.
The Off setting, which is the default, suppresses the error line (and is
therefore compatible with the behavior of Apache-1.2 and below). The On
setting simply adds a line with the server version number and ServerName of
the serving virtual host, and the EMail setting additionally creates a
"mailto:" reference to the ServerAdmin of the referenced document.


----------------------------------------------------------------------------
----

ServerTokens directive
Syntax: ServerTokens Minimal|ProductOnly|OS|Full
Default: ServerTokens Full
Context: server config
Status: core
Compatibility: ServerTokens is only available in Apache 1.3 and later; the
ProductOnly keyword is only available in versions later than 1.3.12
This directive controls whether Server response header field which is sent
back to clients includes a description of the generic OS-type of the server
as well as information about compiled-in modules.

ServerTokens Prod[uctOnly]
Server sends (e.g.): Server: Apache
ServerTokens Min[imal]
Server sends (e.g.): Server: Apache/1.3.0
ServerTokens OS
Server sends (e.g.): Server: Apache/1.3.0 (Unix)
ServerTokens Full (or not specified)
Server sends (e.g.): Server: Apache/1.3.0 (Unix) PHP/3.0 MyMod/1.2
This setting applies to the entire server, and cannot be enabled or disabled
on a virtualhost-by-virtualhost basis.


--
Charles E. Pelkey
cp_de...@yahoo.com
http://cpdesigns.homeip.net:8080/
"N.B." <nobod...@hotmail.com> wrote in message
news:GSzj8.6541$lM....@news2.bloor.is...

0 new messages