Change the source (don't know where) and recompile and give a bogus 
webserver name:

Server: Happy Harry's webserver/1.1 (Commodore64) mod_squishy/-1.2

In reality - use best practices to secure your installation. Security 
through obsurity is not really a great practice.

Kevin Passey wrote:
> I have been using Nessus to scan my server - and they recommend that you do
> not give out exactly the version information of your web server "as it helps
> a hacker define what webserver you have, and thus any vulnerabilities that
> may exist on your server"
> 
> Does that help?
> 
> Kevin
> 
> -----Original Message-----
> From: Henner Zeller [mailto:[EMAIL PROTECTED]]
> Sent: 18 July 2002 15:37
> To: Tomcat Users List
> Subject: Re: How do I Hide version specific information
> 
> 
> 
> mail.NoSuchExplainingContentException
> at task.reading.MailReader(MailReader.java:42)
> ;-)
> 
> Anyway .. what version specific information of what you want to hide .. 
> from whom ?
> 
> On Thu, 18 Jul 2002, Kevin Passey wrote:
> 
> 
>>Thanks
>>
>>Kevin Passey
> 
> 
> -hen
> 
> 
> 
> --
> To unsubscribe, e-mail:
> <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail:
> <mailto:[EMAIL PROTECTED]>
> 
> --
> To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
> 
> 
> 



--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to