Linux

Ask something
Discussion Locked

Web Server "banner"

0 helpful
3 replies

by fimos

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Dear all,

Recently I was asked about changing the web server "identity", such as changing IIS to something else (like we always say change telnet banner "SunOS 5.8" to something else), whether it is practical and whether it is a common best practice... any comment?

3 replies

by cpfeiffe

From a security standpoint you absolutely should do this. It is a security "best practice". It falls under the same regard as changing the telnet banner. Many hacks are written specifically for application/version combinations that have a known vulnerability. This won't keep everybody away, but it does keep some away. A nice concept would be to make your UNIX server say it is ISS something. Most ISS hacks won't work at all.

This discussion is closed to new replies.