Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== Apache - Harden Apache - Hide the Apache version ======

Visit the web server in Firefox.

  * Activate Firebug by clicking the Firebug icon on the top right side.
  * If you check the HTTP response headers in Firebug, it will show the Apache version along with your operating system name and version.

To hide this information from browsers, make some changes in the Apache main configuration file.

Edit the httpd.conf file:

<code bash>
sudo vi /etc/apache/apache2.conf
</code>

Add the following line at the end of file:

<file apache /etc/apache/apache2.conf>
ServerSignature Off
ServerTokens Prod
</file>

Save the file and restart the Apache service to reflect these changes:

<code bash>
sudo apachectl restart
</code>

Now, open Firefox and access the web server.

  * Check the HTTP response headers in Firebug, 
  * This should show the setting **ServerSignature** to Off has removed the version information from Server.