WebApp Sec mailing list archives

Re: Removing Apache Banner on IBM Websphere HTTP Server (Apache) for Windows


From: Daniel Cid <danielcid () yahoo com br>
Date: Fri, 20 Feb 2004 10:57:00 -0300 (ART)

You can restrict the signature (it will only show
"Apache") in the httpd.conf:

ServerSignature Off

ServerTokens ProductOnly

Daniel B. Cid

--- Steffen Furholm / CABO Communications A/S
<steffen () cabocomm dk> escreveu: > 
Is there a method for removing the HTTP Banner on
IBM
Websphere HTTP Server (Apache) for Windows?
(Server:
IBM_HTTP_SERVER/1.3.28  Apache/1.3.28)

Can a change be made to the httpd.conf ? Is this
likely to impact the functioning of the app at
all?

It's (unfortunately) not possible to change the
server signature in 
httpd.conf. With Apache 1.3 I would recommend
changing it with 
mod_security using the "SecServerSignature" option.
I don't have any 
experience with mod_security under Windows, though.

With Apache 2.0 it's possible to change the server
signature with the 
mod_headers module.

-- 

mvh
   Steffen Furholm / CABO Communications A/S
   steffen () cabocomm dk
   http://www.cabocomm.dk
   Tel.: +45 86193433
   Fax: +45 86193431
 

______________________________________________________________________

Yahoo! Mail - O melhor e-mail do Brasil! Abra sua conta agora:
http://br.yahoo.com/info/mail.html


Current thread: