apacheapache2

Apache: how to hide server version and operation system from users?

I've read on one site that I need to add two lines to httpd.conf file:

ServerSignature Off

ServerTokens Prod

But when I've added them nothing changed. As previously I can see in my browser

Apache/2.2.16 (Debian)

Maybe that's important: When I opened file (I mean before adding above lines) httpd.conf I saw it's empty. I use VPS.

Thanks!

Solution

  • you didnt give enough information about os/distribution etc

    but in ubuntu's apache installation apache2.conf looks like this:

    <cut>
Include httpd.conf
Include ports.conf
Include conf.d/
Include sites-enabled/

    and in conf.d/security you can see

    ServerTokens OS

    just check your configs, somewhere it gets overwritten after you set it in your httpd.conf