ServerTokens :: unsecure -Apache shows everything

Discussion in 'Server Operation' started by tom, Apr 30, 2006.

  1. tom

    tom Member

    With Debian3.1 and ISPC Default installation apache shows "Full" information about apache & co.

    I can't find the httpd.conf file where I can change
    ServerTokens Full
    Where is it in ISCP?

  2. till

    till Super Moderator Staff Member ISPConfig Developer

    This is not configured by ISPConfig, "ServerTokens Full" is the default setting in DEBIAN.

    Have you tried to add "ServerTokens Min" to your httpd.conf and restarted your httpd?
  3. falko

    falko Super Moderator Howtoforge Staff

    If it's not in your Apache configuration, you must manually add the ServerTokens directive and restart Apache.
  4. tom

    tom Member

    Ok, thanks.

    I thing you could put it in your Debian perfect setup

  5. ra1

    ra1 New Member

    If you want to hide Apache information,
    you just have to change these lines (or add them if they aren't there already) in your apache config.

    ServerSignature Off
    ServerTokens Prod
    ServerSignature controls server information that is displayed on apache generated pages. Like error pages.

    ServerTokens controls the Server header string.


Share This Page