 |
Apache2Triad Help, Support and Development
The apache2triad help , support and development forums
|
| View previous topic :: View next topic |
| Author |
Message |
Amrit
Joined: 18 May 2006
Posts: 16
Location: Holland
|
| Posted: Tue Jan 30, 2007 10:37 am Post subject: How to Remove the Server information on AT2 |
|
|
How can i remove the server information "Apache/2.2.0 (Win32)" ??
See attach ! |
|
| Back to top |
|
lku homer
Joined: 29 May 2006
Posts: 104
|
| Posted: Tue Jan 30, 2007 5:28 pm Post subject: |
|
|
In other words, possibly of custom 404 error page.
If that's not what you want let me know. |
|
| Back to top |
|
Amrit
Joined: 18 May 2006
Posts: 16
Location: Holland
|
| Posted: Wed Jan 31, 2007 12:21 am Post subject: One more step |
|
|
No no no..... , i just want to remove or mask the server information.
By default many Apache installations tell the world what version of Apache you're running, and even what Apache Modules are installed on the server. Attackers can use this information to their advantage when performing an attack.
here are two directives that i add, or edit in my httpd.conf file:
ServerSignature Off
ServerTokens Prod
The ServerSignature appears on the bottom of pages generated by apache such as 404 pages, directory listings, etc.
The ServerTokens directive is used to determine what Apache will put in the Server HTTP response header. By setting it to Prod it sets the HTTP response header.
u]Just look at my second printscreen[/u]
Now my ERROR page shows only APACHE without win32 /php
How can i get ride off the APACHE information ???[/url] |
|
| Back to top |
|
| |
|