ServerTokens :: unsecure -Apache shows everything

[tom]

With Debian3.1 and ISPC Default installation apache shows "Full" information about apache & co.

I can't find the httpd.conf file where I can change

ServerTokens Full

Where is it in ISCP?

tom

[till]

This is not configured by ISPConfig, "ServerTokens Full" is the default setting in DEBIAN.

Have you tried to add "ServerTokens Min" to your httpd.conf and restarted your httpd?

[falko]

If it's not in your Apache configuration, you must manually add the ServerTokens directive and restart Apache.

[tom]

Originally Posted by falko

If it's not in your Apache configuration, you must manually add the ServerTokens directive and restart Apache.

Ok, thanks.

I thing you could put it in your Debian perfect setup

tom

[ra1]

If you want to hide Apache information,
you just have to change these lines (or add them if they aren't there already) in your apache config.

ServerSignature Off
ServerTokens Prod

ServerSignature controls server information that is displayed on apache generated pages. Like error pages.

ServerTokens controls the Server header string.


ra1