Re: Apache 2.2 showing version



no KDK, you were not incorrect. in fact, my answer should have included your
information, and your answer should have included mine (ie, we were both a
little short). the fact is, that both items should be considered when taming
down that particular info that apache displays.

ServerTokens specifies the verbosity, while ServerSignature allows it on, or
eliminates it altogether.

cheers,
jonathan

On Saturday 29 April 2006 12:59, Kevin Kinsey wrote:
Jonathan Horne wrote:
take a look at the ServerTokens section of httpd.conf.

#
# ServerTokens
# This directive configures what you return as the Server HTTP response
# Header. The default is 'Full' which sends information about the OS-Type
# and compiled in modules.
# Set to one of: Full | OS | Minor | Minimal | Major | Prod
# where Full conveys the most information, and Prod the least.
#
ServerTokens Full

cheers,
jonathan

Oops --- foot in mouth disease here, methinks. I was looking
at a box with Apache 1.3.X ...

Sorry, Aguiar .... :o

KDK
_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"



Relevant Pages

  • Re: Need help to get mod_perl working
    ... Apache is configured only to send the operating system ... You'll need to change the ServerTokens line in your configuration file ... `service httpd restart` as root. ...
    (Fedora)
  • Re: Linux Slapper Worm
    ... controlling exactly what is included in the string, ... #define SERVER_BASEVENDOR "Apache Group" ... edit your httpd.conf file and set ServerTokens to Secure by ...
    (Bugtraq)
  • Re: Change Apache version string
    ... Pat Maddox writes: ... > I'm not sure if I'm being overly paranoid, but I don't really like the ... you can change it with the ServerTokens directive in the ... Which prevents Apache from putting its version at the end of any pages it ...
    (freebsd-questions)
  • Re: remove apache os banner
    ... ServerTokens directive ... Compatibility: ServerTokens is only available in Apache 1.3 and later; ... How do I remove the os banner, ...
    (Security-Basics)
  • Re: Apache 2.2 showing version
    ... take a look at the ServerTokens section of httpd.conf. ... # This directive configures what you return as the Server HTTP response ... others, It shows the version of apache, php, ssl, etc. ...
    (freebsd-questions)