[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Hide version of Apache, PHP, OpenSSL,.... to world



Hi,

At 11:34 AM 12/19/2000 -0500, Brian Curtis wrote:
> If someone go to www.netcraft.com this site list what run
> any server, like this:
>
> Apache/1.3.6 (Unix) PHP/4.0.3pl1 mod_perl/1.21 mod_ssl/2.2.8
> OpenSSL/0.9.2b on Linux
>
> Somebody know how to hide version numbers of this programs ?
>
> R.Batalla

Put the following somewhere in your httpd.conf:

  ServerTokens OS


Which will strip the above output to:

  Server: Apache/1.3.6 (Unix)

Search the Apache docs on "ServerToken" for additional info.

--
Brian Curtis

Hi  Brian and everyone,

I tried adding this the httpd.conf for my RaQ2 and it doesn't seem to suppress anything. I went to Apache.org and found this
**********
ServerTokens directive

Syntax: ServerTokens Minimal|ProductOnly|OS|Full
Default: ServerTokens Full
Context: server config
Status: core
Compatibility: ServerTokens is only available in Apache 1.3 and later; the ProductOnly keyword is only available in versions later than 1.3.12

This directive controls whether Server response header field which is sent back to clients includes a description of the generic OS-type of the server as well as
information about compiled-in modules.

ServerTokens Prod[uctOnly]
     Server sends (e.g.): Server: Apache
ServerTokens Min[imal]
     Server sends (e.g.): Server: Apache/1.3.0
ServerTokens OS
     Server sends (e.g.): Server: Apache/1.3.0 (Unix)
ServerTokens Full (or not specified)
     Server sends (e.g.): Server: Apache/1.3.0 (Unix) PHP/3.0 MyMod/1.2

This setting applies to the entire server, and cannot be enabled or disabled on a virtualhost-by-virtualhost basis.
*********************

My RaQ2 is running 1.3.3 and netcraft shows this: Apache/1.3.3 Cobalt (Unix) (Red Hat/Linux) on Linux
I can't get any of the above directives to work.

Does anyone have suggestions or explanations for what I may be doing wrong? I am restarting httpd after editing httpd.conf.

Any info would be appreciated very much..:)

Merry Christmas and a Happy New Year to all
Diana
Crest Communications, Inc.		diana@xxxxxxxxxxxxx
Beautiful Sunny Florida		http://crestcommunications.com/
352-495-9359, 425-732-9785 fax