User Tools

Site Tools


apache:harden_apache:hide_the_apache_version

Apache - Harden Apache - Hide the Apache version

Visit the web server in Firefox.

  • Activate Firebug by clicking the Firebug icon on the top right side.
  • If you check the HTTP response headers in Firebug, it will show the Apache version along with your operating system name and version.

To hide this information from browsers, make some changes in the Apache main configuration file.

Edit the httpd.conf file:

sudo vi /etc/apache/apache2.conf

Add the following line at the end of file:

/etc/apache/apache2.conf
ServerSignature Off
ServerTokens Prod

Save the file and restart the Apache service to reflect these changes:

sudo apachectl restart

Now, open Firefox and access the web server.

  • Check the HTTP response headers in Firebug,
  • This should show the setting ServerSignature to Off has removed the version information from Server.
apache/harden_apache/hide_the_apache_version.txt · Last modified: 2023/07/17 09:39 by peter

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki