|
Thanks a lot to all for
the insight. There were some websites which were talking that you CAN do it
thru mod_headers , but now it seems you cannot do it. Soumendu
From: Nir Peled
[mailto:nirp@xxxxxxxxxxxxxxx] Yes, I am sorry, I guess I didn't check it correctly. My
apologies. מאת: Tamer Embaby
[mailto:Tamer.Embaby@xxxxxxxxxx] Soumendu, Moreover, you can use mod_security to change it using
Tamer From: Tamer Embaby
[mailto:Tamer.Embaby@xxxxxxxxxx] Soumendu, You cannot achieve that with mod_headers AFAIK. “Server”
header is an exception, you have to change it in code and recompile Apache. Regards, Tamer From: Nir Peled
[mailto:nirp@xxxxxxxxxxxxxxx] By the way, I see you already tried it, but I just tried it as
well, and it really does remove the header, so if it still doesn't work see
that you're doing it in the right place. From: Nir Peled Hi again, If you really want to use mod_headers for this, I'd suggest the
following line: Header unset Server Regards, Nir Peled From: Soumendu
Bhattacharya [mailto:soumendu_bhattacharya@xxxxxxxxxxxxxxx] Thanks Nir. Now Apache
doesn’t reveal everything else , but still says its Apache. I guess this should
be fine, but any idea why mod_headers didn’t work ? Regards Soumendu
From: Nir Peled
[mailto:nirp@xxxxxxxxxxxxxxx] My bad, it is ServerTokens, not ServerToken. From: Nir Peled
[mailto:nirp@xxxxxxxxxxxxxxx] Hi Soumendu, Did you try setting ServerToken to Prod? I'm not sure it changes the headers, but it might. Give it a try. Regards, Nir From: Soumendu
Bhattacharya [mailto:soumendu_bhattacharya@xxxxxxxxxxxxxxx] Hi , I
am trying to modify the Server header (to disable Apache banner information)
with mod_headers , but it doesn’t seem to be working. Header unset Server Header set Server " Web Server" If I change it to Server1 , it works , but seems
it’s not able to modify the Server header in particular. I have verified the
output thru wget & live http headers. Also I am requesting a static
image file and it’s not a dynamic content ( I have jboss as my application
server , Apache connects thru mod_jk). This image file is not being served by
Jboss and is getting served directly by Apache ( I also have mod_cache enabled
, but tried clearing the cache , still same result). Is this a limitation or am I doing something wrong ?
Is there any other way to stop apache from revealing its version information ? Regards Soumendu |
|