Techie Corner

It’s good to hide the apache2 version number from outsider. Especially hiding apache2 version number in all the error pages. Hackers used to collect all this information before they launch any attack. If you running an old version server that known to have security exploit then it will ease the work for hackers.

To hide apache2 version number in error pages, follow the steps below:-

• ssh to your server with root privilege
• Edit your httpd.conf or apache2.conf file. Normally it’s located at /etc/httpd/conf/httpd.conf
• Look for

  ServerSignature On
  ServerTokens full

  to

  ServerSignature Off
  ServerTokens Prod

• After edit the file, restart your apache for it to take effect.

  service httpd restart

Now your apache2 version number will not be shown in common error pages.

Tags: apache, apache server, hide apache version no, hide apache version number, hide apache2 version number

---