Thanks Nir. Now Apache doesn’t
reveal everything else , but still says its Apache. I guess this should be
fine, but any idea why mod_headers didn’t work ? Regards Soumendu From: Nir Peled
[mailto:nirp@xxxxxxxxxxxxxxx] My bad, it is ServerTokens, not ServerToken. From: Nir Peled
[mailto:nirp@xxxxxxxxxxxxxxx] Hi Soumendu, Did you try setting ServerToken to Prod? I'm not sure it changes the headers, but it might. Give it a try. Regards, Nir From: Soumendu
Bhattacharya [mailto:soumendu_bhattacharya@xxxxxxxxxxxxxxx] Hi , I
am trying to modify the Server header (to disable Apache banner information)
with mod_headers , but it doesn’t seem to be working. Header unset Server Header set Server " Web Server" If I change it to Server1 , it works , but seems
it’s not able to modify the Server header in particular. I have verified the
output thru wget & live http headers. Also I am requesting a static
image file and it’s not a dynamic content ( I have jboss as my application
server , Apache connects thru mod_jk). This image file is not being served by
Jboss and is getting served directly by Apache ( I also have mod_cache enabled
, but tried clearing the cache , still same result). Is this a limitation or am I doing something wrong ?
Is there any other way to stop apache from revealing its version information ? Regards Soumendu |