Linux·4,543 discussions

Response from Apache and FC3

Locked

When a computer is scanned for vulnerabilities is there a way to alter the servers response so that both Apache and it’s version, and FC3 are not provided in the response?

Topic

Reply To: Response from Apache and FC3

In reply to Response from Apache and FC3

in apache’s configuration
you have full none all settings on server response messages.
read both http.conf and httpcommon.conf

as it’s in one of those files.

Reply To: Response from Apache and FC3

In reply to Reply To: Response from Apache and FC3

commonhttpd.conf
the sections are here, in default:
#
# ServerTokens
# This directive configures what you return as the Server HTTP response
# Header. The default is ‘Full’ which sends information about the OS-Type
# and compiled in modules.
# Set to one of: Full | OS | Minor | Minimal | Major | Prod
# where Full conveys the most information, and Prod the least.
#
ServerTokens Full

#
# Optionally add a line containing the server version and virtual host
# name to server-generated pages (error documents, FTP directory listings,
# mod_status and mod_info output etc., but not CGI generated documents).
# Set to “EMail” to also include a mailto: link to the ServerAdmin.
# Set to one of: On | Off | EMail
#
ServerSignature On

Reply To: Response from Apache and FC3

In reply to Reply To: Response from Apache and FC3

Poster rated this answer.

Reply To: Response from Apache and FC3

In reply to Response from Apache and FC3

This question was closed by the author

[Author]

Replies