Apache 2.2 showing version

2006-04-29 Thread Aguiar Magalhaes
Hi,

When the Apache 2.2 shows the forbidden pages and
others, It shows the version of apache, php, ssl, etc.

It's dangerous..

Please, how can I fix it ?

Thanks,

Aguiar



___ 
Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no celular e 
anti-spam realmente eficaz. 
http://br.info.mail.yahoo.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Apache 2.2 showing version

2006-04-29 Thread Jonathan Horne
take a look at the ServerTokens section of httpd.conf.

#
# ServerTokens
# This directive configures what you return as the Server HTTP response
# Header. The default is 'Full' which sends information about the OS-Type
# and compiled in modules.
# Set to one of:  Full | OS | Minor | Minimal | Major | Prod
# where Full conveys the most information, and Prod the least.
#
ServerTokens Full

cheers,
jonathan


On Saturday 29 April 2006 12:16, Aguiar Magalhaes wrote:
 Hi,

 When the Apache 2.2 shows the forbidden pages and
 others, It shows the version of apache, php, ssl, etc.

 It's dangerous..

 Please, how can I fix it ?

 Thanks,

 Aguiar



 ___
 Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no celular
 e anti-spam realmente eficaz. http://br.info.mail.yahoo.com/
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Apache 2.2 showing version

2006-04-29 Thread Kevin Kinsey

Aguiar Magalhaes wrote:

Hi,

When the Apache 2.2 shows the forbidden pages and
others, It shows the version of apache, php, ssl, etc.

It's dangerous..

Please, how can I fix it ?

Thanks,

Aguiar



Look for the ServerSignature directive in httpd.conf.  Be sure and 
restart Apache after changing this knob.


Good luck,

Kevin Kinsey
--
Two heads are better than one.
-- John Heywood

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Apache 2.2 showing version

2006-04-29 Thread Kevin Kinsey

Jonathan Horne wrote:

take a look at the ServerTokens section of httpd.conf.

#
# ServerTokens
# This directive configures what you return as the Server HTTP response
# Header. The default is 'Full' which sends information about the OS-Type
# and compiled in modules.
# Set to one of:  Full | OS | Minor | Minimal | Major | Prod
# where Full conveys the most information, and Prod the least.
#
ServerTokens Full

cheers,
jonathan





Oops --- foot in mouth disease here, methinks.  I was looking
at a box with Apache 1.3.X ...

Sorry, Aguiar  :o

KDK

--
FORTUNE'S FUN FACTS TO KNOW AND TELL:   #44
Zebra's are colored with dark stripes on a light background.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Apache 2.2 showing version

2006-04-29 Thread Jonathan Horne
no KDK, you were not incorrect.  in fact, my answer should have included your 
information, and your answer should have included mine (ie, we were both a 
little short).  the fact is, that both items should be considered when taming 
down that particular info that apache displays.

ServerTokens specifies the verbosity, while ServerSignature allows it on, or 
eliminates it altogether.

cheers,
jonathan

On Saturday 29 April 2006 12:59, Kevin Kinsey wrote:
 Jonathan Horne wrote:
  take a look at the ServerTokens section of httpd.conf.
 
  #
  # ServerTokens
  # This directive configures what you return as the Server HTTP response
  # Header. The default is 'Full' which sends information about the OS-Type
  # and compiled in modules.
  # Set to one of:  Full | OS | Minor | Minimal | Major | Prod
  # where Full conveys the most information, and Prod the least.
  #
  ServerTokens Full
 
  cheers,
  jonathan

 Oops --- foot in mouth disease here, methinks.  I was looking
 at a box with Apache 1.3.X ...

 Sorry, Aguiar  :o

 KDK
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]