Re: securing linux webserver?

["AragonX" <aragonx () dcsnow com>]

<quote who="Eduardo Kienetz">
> Also, block the disclosure of application versions:
> Apache x.xx (i.e. when you try to access a page tat does not exist is
> shows: "Apache/1.3.xx Server at xxxxx.com Port 80")

For apache, change your /etc/httpd/conf/httpd.conf file.

ServerTokens OS

should be changed to

ServerTokens Prod.

Don't forget to hide Sendmail information also.  I used this site:

http://homepage.mac.com/felipe_alfaro/iblog/B1004527421/C406641880/E2004287443/