March 24, 2008
Filed Under (Linux HOW TOs) by admin on 24-03-2008

You should hide apache banner information from being displayed so the attackers are not aware of what version of Apache version you are running and thus making it more difficult for them to exploit any system holes and thus making vulnerability scanners work harder and in some cases impossible without knowing banner information.

# nano /etc/httpd/conf/httpd.conf

Change the ServerSignature line to:

ServerSignature Off

Change the ServerTokens line to:

ServerTokens Prod

Restart Apache:

# /sbin/service httpd restart

Tags: apache, serversignature, servertokens

Related posts



You must be logged in to post a comment.