Apache conf

Discussion in 'Installation/Configuration' started by shadowspank, Mar 28, 2006.

  1. shadowspank

    shadowspank New Member

    I have noticed that my apache is showing everything thats running on the server in the past this did not show. Before it just showed the OS and apache2.

    Now it shows Apache/2.0.54 (Fedora) DAV/2 PHP/5.0.5 mod_python/3.1.4 Python/2.4.1 mod_ssl/2.0.54 OpenSSL/0.9.7f mod_perl/2.0.1 Perl/v5.8.6

    I looked at both conf files under ispconfig and httpd.conf. I have set what I think shows or blocks this information in the httpd.conf file under ServerSignature on to Off. This information is still showing is there another setting that I should change to make sure this information does not show on the web as its a risk to my system thanks.

    Let me know if you want to see how I was able to see this information and I can IM you I dont want this posted every where dont want hackers to know the host name thanks.
     
  2. falko

    falko Super Moderator Howtoforge Staff

    Where exactly does it show this? In a PHP script, HTML, ...?
     
  3. Aiken

    Aiken New Member

    Hi,
    the directive you want is the servertokens one. You want to set it to
    ServerTokens Prod
    See http://httpd.apache.org/docs/2.0/mod/core.html#servertokens
    for more info.
    Regards
     
  4. shadowspank

    shadowspank New Member

    Thanks after talking with falko I was able to locate that same link on Apache site. I did how ever like a nub forgot to make sure that it was not # out I dont know how it change I must have done it and forgot. I was doing something to secure it dont know why I did something so lame as that thanks.
     

Share This Page