The header that came back included the following:
Server: Apache/1.3.3 Cobalt (Unix)  (Red Hat/Linux)
What I had expected was:
Server: Apache
What am I doing wrong?
Nothing, the Apache directives:

ServerTokens ProductOnly

and

ServerTokens Minimal

will only return "Apache" on Apache versions 1.3.14 and later. Earlier versions of Apache will return what you're seeing - but will still strip out all the other stuff regarding the build versions of SSL, PHP, etc.


_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security


Reply via email to