You are not logged in.
I have a LAMP setup with the following configuration:
/etc/httpd/conf/extra/httpd-default.conf
ServerTokens Prod
ServerSignature Off
The web server is currently completely empty (waiting for a drupal setup).
When a fake search is performed on the server (http://www.serverdomain.com/fake-search) the 404 error returns the lamp server details in full:
Apache, OpenSSL and php version details. Here is a screenshot.
How do I go about hiding these version details if ServerTokens and ServerSignature are both already set optimally?
Last edited by monash (2011-11-13 02:04:32)
Keepinitlite: AsusP5K+Nvidia210+Core2+2gbRam
Offline
Here (http://www.ducea.com/2006/06/15/apache- … e-version/) I read that your value for ServerTokens is incorrect...
Offline
Thanks but; Arch Linux Instructions:
# ServerTokens
# This directive configures what you return as the Server HTTP response
# Header. The default is 'Full' which sends information about the OS-Type
# and compiled in modules.
# Set to one of: Full | OS | Minor | Minimal | Major | Prod
# where Full conveys the most information, and Prod the least.
From the same post quoted above...
"I have tried this but its not working.when i get the error-404 page i get the apache version and os information.why is it so.plz help"
Keepinitlite: AsusP5K+Nvidia210+Core2+2gbRam
Offline
Have you restarted the httpd daemon after making the change?
Are you familiar with our Forum Rules, and How To Ask Questions The Smart Way?
BlueHackers // fscanary // resticctl
Offline
Yes, restarted. But...
Had to jump back to oneiric server setup as drush-5.0 installation on arch seemed prone to errors.
Can't live without drush-5.0 (latest beta) to manage Drupal-7 :-)
Keepinitlite: AsusP5K+Nvidia210+Core2+2gbRam
Offline