By the way, I see you
already tried it, but I just tried it as well, and it really does remove the
header, so if it still doesn't work see that you're doing it in the right
place. From: Nir Peled
Hi again, If you really want to use
mod_headers for this, I'd suggest the following line: Header unset Server Regards, Nir Peled From: Soumendu
Bhattacharya [mailto:soumendu_bhattacharya@xxxxxxxxxxxxxxx] Thanks Nir. Now Apache doesn’t
reveal everything else , but still says its Apache. I guess this should be
fine, but any idea why mod_headers didn’t work ? Regards Soumendu From: Nir Peled
[mailto:nirp@xxxxxxxxxxxxxxx] My bad, it is
ServerTokens, not ServerToken. From: Nir Peled
[mailto:nirp@xxxxxxxxxxxxxxx] Hi Soumendu, Did you try setting
ServerToken to Prod? I'm not sure it changes
the headers, but it might. Give it a try. Regards, Nir From: Soumendu
Bhattacharya [mailto:soumendu_bhattacharya@xxxxxxxxxxxxxxx] Hi , I am trying to modify
the Server header (to disable Apache banner information) with mod_headers , but
it doesn’t seem to be working. Header unset Server Header set Server " Web Server" If I change it to Server1 , it works , but seems it’s not able to
modify the Server header in particular. I have verified the output thru wget
& live http headers. Also I am requesting a static image file and it’s
not a dynamic content ( I have jboss as my application server , Apache connects
thru mod_jk). This image file is not being served by Jboss and is getting
served directly by Apache ( I also have mod_cache enabled , but tried clearing
the cache , still same result). Is this a limitation or am I doing something wrong ? Is there any other
way to stop apache from revealing its version information ? Regards Soumendu |