Apache 2.2 showing version

Hi,

When the Apache 2.2 shows the forbidden pages and
others, It shows the version of apache, php, ssl, etc.

It's dangerous..

Please, how can I fix it ?

Thanks,

Aguiar


		
_______________________________________________________ 
Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de
e-mail no celular e anti-spam realmente eficaz. 
http://br.info.mail.ya
hoo.com/
_______________________________________________
freebsd-questionsfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-que
stions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribefreebsd.org"

Aguiar Magalhaes wrote:
> Hi,
> 
> When the Apache 2.2 shows the forbidden pages and
> others, It shows the version of apache, php, ssl, etc.
> 
> It's dangerous..
> 
> Please, how can I fix it ?
> 
> Thanks,
> 
> Aguiar
> 

Look for the "ServerSignature" directive in
httpd.conf.  Be sure and 
restart Apache after changing this knob.

Good luck,

Kevin Kinsey
-- 
Two heads are better than one.
		-- John Heywood

_______________________________________________
freebsd-questionsfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-que
stions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribefreebsd.org"

take a look at the ServerTokens section of httpd.conf.

#
# ServerTokens
# This directive configures what you return as the Server
HTTP response
# Header. The default is 'Full' which sends information
about the OS-Type
# and compiled in modules.
# Set to one of:  Full | OS | Minor | Minimal | Major | Prod
# where Full conveys the most information, and Prod the
least.
#
ServerTokens Full

cheers,
jonathan


On Saturday 29 April 2006 12:16, Aguiar Magalhaes wrote:
> Hi,
>
> When the Apache 2.2 shows the forbidden pages and
> others, It shows the version of apache, php, ssl, etc.
>
> It's dangerous..
>
> Please, how can I fix it ?
>
> Thanks,
>
> Aguiar
>
>
>
> _______________________________________________________
> Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas
de e-mail no celular
> e anti-spam realmente eficaz. http://br.info.mail.ya
hoo.com/
> _______________________________________________
> freebsd-questionsfreebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-que
stions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribefreebsd.org"
_______________________________________________
freebsd-questionsfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-que
stions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribefreebsd.org"

Jonathan Horne wrote:
> take a look at the ServerTokens section of httpd.conf.
> 
> #
> # ServerTokens
> # This directive configures what you return as the
Server HTTP response
> # Header. The default is 'Full' which sends
information about the OS-Type
> # and compiled in modules.
> # Set to one of:  Full | OS | Minor | Minimal | Major |
Prod
> # where Full conveys the most information, and Prod the
least.
> #
> ServerTokens Full
> 
> cheers,
> jonathan
> 
> 


Oops --- foot in mouth disease here, methinks.  I was
looking
at a box with Apache 1.3.X ...

Sorry, Aguiar .... :o

KDK

-- 
FORTUNE'S FUN FACTS TO KNOW AND TELL:		#44
	Zebra's are colored with dark stripes on a light
background.

_______________________________________________
freebsd-questionsfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-que
stions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribefreebsd.org"

no KDK, you were not incorrect.  in fact, my answer should
have included your 
information, and your answer should have included mine (ie,
we were both a 
little short).  the fact is, that both items should be
considered when taming 
down that particular info that apache displays.

ServerTokens specifies the verbosity, while ServerSignature
allows it on, or 
eliminates it altogether.

cheers,
jonathan

On Saturday 29 April 2006 12:59, Kevin Kinsey wrote:
> Jonathan Horne wrote:
> > take a look at the ServerTokens section of
httpd.conf.
> >
> > #
> > # ServerTokens
> > # This directive configures what you return as the
Server HTTP response
> > # Header. The default is 'Full' which sends
information about the OS-Type
> > # and compiled in modules.
> > # Set to one of:  Full | OS | Minor | Minimal |
Major | Prod
> > # where Full conveys the most information, and
Prod the least.
> > #
> > ServerTokens Full
> >
> > cheers,
> > jonathan
>
> Oops --- foot in mouth disease here, methinks.  I was
looking
> at a box with Apache 1.3.X ...
>
> Sorry, Aguiar .... :o
>
> KDK
_______________________________________________
freebsd-questionsfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-que
stions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribefreebsd.org"