PDA

View Full Version : Apache conf


shadowspank
28th March 2006, 02:16
I have noticed that my apache is showing everything thats running on the server in the past this did not show. Before it just showed the OS and apache2.

Now it shows Apache/2.0.54 (Fedora) DAV/2 PHP/5.0.5 mod_python/3.1.4 Python/2.4.1 mod_ssl/2.0.54 OpenSSL/0.9.7f mod_perl/2.0.1 Perl/v5.8.6

I looked at both conf files under ispconfig and httpd.conf. I have set what I think shows or blocks this information in the httpd.conf file under ServerSignature on to Off. This information is still showing is there another setting that I should change to make sure this information does not show on the web as its a risk to my system thanks.

Let me know if you want to see how I was able to see this information and I can IM you I dont want this posted every where dont want hackers to know the host name thanks.

falko
28th March 2006, 10:27
Now it shows Apache/2.0.54 (Fedora) DAV/2 PHP/5.0.5 mod_python/3.1.4 Python/2.4.1 mod_ssl/2.0.54 OpenSSL/0.9.7f mod_perl/2.0.1 Perl/v5.8.6

Where exactly does it show this? In a PHP script, HTML, ...?

Aiken
1st April 2006, 12:08
I have noticed that my apache is showing everything thats running on the server in the past this did not show. Before it just showed the OS and apache2.

Now it shows Apache/2.0.54 (Fedora) DAV/2 PHP/5.0.5 mod_python/3.1.4 Python/2.4.1 mod_ssl/2.0.54 OpenSSL/0.9.7f mod_perl/2.0.1 Perl/v5.8.6

I looked at both conf files under ispconfig and httpd.conf. I have set what I think shows or blocks this information in the httpd.conf file under ServerSignature on to Off. This information is still showing is there another setting that I should change to make sure this information does not show on the web as its a risk to my system thanks.

Let me know if you want to see how I was able to see this information and I can IM you I dont want this posted every where dont want hackers to know the host name thanks.
Hi,
the directive you want is the servertokens one. You want to set it to
ServerTokens Prod
See http://httpd.apache.org/docs/2.0/mod/core.html#servertokens
for more info.
Regards

shadowspank
2nd April 2006, 12:05
Thanks after talking with falko I was able to locate that same link on Apache site. I did how ever like a nub forgot to make sure that it was not # out I dont know how it change I must have done it and forgot. I was doing something to secure it dont know why I did something so lame as that thanks.