Disable/hide apache version in headers?

خرید بک لینک

Yesterday, 05:23 PM #1

How can we hide this?

On security tests it's not a very bad thing, but the server is displayed in headers like Apache/2.4.
The advise is to hide this but how can this be done?

I found an older thread where it was written one should edit the /etc/httpd/conf/extra/httpd-default.conf and set:
ServerSignature Off (I believe this is the default)
and
ServerTokens Prod (default is Major)
and restart httpd.

Now I tried this, and also tried Minor on Servertokens, but it does not change much, keeps stating "Server apache/2.4" in headers.

How can we hide this?

Greetings, Richard.


Yesterday, 09:35 PM #2

Hello Richard,

You've got right, the file conf/extra/httpd-default.conf is the only one which needs to be updated regarding the matter. If it did not hide Apache version in your case it might be because of either apache failed to restart or you have the same directive in another place.

Whether or not apache's version is hidden you can detect on a default error page of apache, i.e. 4xx error, in their default view without processing with PHP.

With regards, Alex.

Professional Server Management for web hosting companies and individuals
Hourly Support, Disaster Recovery, Server Hardening, Monthly Subscription
Directadmin installation and optimization

Click here if you need a Linux Admin


DirectAdmin Forums...

ما را در سایت DirectAdmin Forums دنبال می‌کنید

برچسب: نویسنده: ایمان اصلاحی بازدید: 348 تاريخ: پنجشنبه 7 دی 1396 ساعت: 0:20

صفحه بندی