ServerTokens :: unsecure -Apache shows everything

Discussion in 'Server Operation' started by tom, Apr 30, 2006.

  1. tom

    tom Member

    With Debian3.1 and ISPC Default installation apache shows "Full" information about apache & co.

    I can't find the httpd.conf file where I can change
    Code:
    ServerTokens Full
    Where is it in ISCP?

    tom
     
    tom, Apr 30, 2006
    #1
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    This is not configured by ISPConfig, "ServerTokens Full" is the default setting in DEBIAN.

    Have you tried to add "ServerTokens Min" to your httpd.conf and restarted your httpd?
     
    till, Apr 30, 2006
    #2
  3. falko

    falko Super Moderator ISPConfig Developer

    If it's not in your Apache configuration, you must manually add the ServerTokens directive and restart Apache.
     
    falko, Apr 30, 2006
    #3
  4. tom

    tom Member

    Ok, thanks.

    I thing you could put it in your Debian perfect setup

    tom
     
    tom, May 2, 2006
    #4
  5. ra1

    ra1 New Member

    If you want to hide Apache information,
    you just have to change these lines (or add them if they aren't there already) in your apache config.

    Code:
    ServerSignature Off
ServerTokens Prod
    ServerSignature controls server information that is displayed on apache generated pages. Like error pages.

    ServerTokens controls the Server header string.


    ra1
     
    ra1, May 2, 2006
    #5

Share This Page