I already checked the httpd.cong already set as ServerSignature Off ServerTokens Prod Why it still show the server full info -----Original Message----- From: Evan Platt [mailto:evan@xxxxxxxxxxxxxxxxxx] Sent: Friday, February 09, 2007 10:48 AM To: users@xxxxxxxxxxxxxxxx Subject: Re: remove the http server info banner At 06:41 PM 2/8/2007, Fauziah Mahdan wrote: >Hi all, >I have check from http viewer that my server info was open. >HTTP/1.1 200 OK >Date: date today >Server: Apache/1.3.12 (unix) ApacheJserv/1.1 mod_ssl/2.6.4 >OpenSSL/0.9.5a >Last Modified:date >Etag:code will display >Accept-Ranges:bytes >Content-Length:300 >Connection:close >Content-Type:text/html >How to remove the Server info? In httpd.conf: # ServerTokens # This directive configures what you return as the Server HTTP response # Header. The default is 'Full' which sends information about the OS-Type # and compiled in modules. # Set to one of: Full | OS | Minor | Minimal | Major | Prod # where Full conveys the most information, and Prod the least. # ServerTokens Prod --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx