WebApp Sec mailing list archives

Re: Removing Apache Banner on IBM Websphere HTTP Server (Apache) for Windows


From: Steffen Furholm / CABO Communications A/S <steffen () cabocomm dk>
Date: Fri, 20 Feb 2004 14:16:20 +0100


Is there a method for removing the HTTP Banner on IBM
Websphere HTTP Server (Apache) for Windows? (Server:
IBM_HTTP_SERVER/1.3.28  Apache/1.3.28)

Can a change be made to the httpd.conf ? Is this
likely to impact the functioning of the app at all?

It's (unfortunately) not possible to change the server signature in httpd.conf. With Apache 1.3 I would recommend changing it with mod_security using the "SecServerSignature" option. I don't have any experience with mod_security under Windows, though.

With Apache 2.0 it's possible to change the server signature with the mod_headers module.

--

mvh
  Steffen Furholm / CABO Communications A/S
  steffen () cabocomm dk
  http://www.cabocomm.dk
  Tel.: +45 86193433
  Fax: +45 86193431


Current thread: