User Tools

Site Tools


apache:harden_apache

This is an old revision of the document!


Apache - Harden Apache

Hide the Apache version

Visit your web server in Firefox. Activate Firebug by clicking the Firebug icon on the top right side.

If you check the HTTP response headers in Firebug, it will show the Apache version along with your operating system name and version.

To hide this information from browsers, you will need to make some changes in Apache's main configuration file.

You can do this by editing the httpd.conf file:

sudo vi /etc/apache/apache2.conf

Add the following line at the end of file:

/etc/apache/apache2.conf
ServerSignature Off
ServerTokens Prod

Save the file and restart the Apache service to reflect these changes:

sudo apachectl restart

Now, open Firefox and access your web server. Check the HTTP response headers in Firebug, You should see that setting ServerSignature to Off has removed the version information from Server.

apache/harden_apache.1476315316.txt.gz · Last modified: 2020/07/15 09:30 (external edit)

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki