Techie Corner

It’s good to hide the apache2 version number from outsider. Especially hiding apache2 version number in all the error pages. Hackers used to collect all this information before they launch any attack. If you running an old version server that known to have security exploit then it will ease the work for hackers.

To hide apache2 version number in error pages, follow the steps below:-

• ssh to your server with root privilege
• Edit your httpd.conf or apache2.conf file. Normally it’s located at /etc/httpd/conf/httpd.conf
• Look for
  
  ServerSignature On ServerTokens full

  1 2	ServerSignature On ServerTokens full

  
  to
  
  ServerSignature Off ServerTokens Prod

  1 2	ServerSignature Off ServerTokens Prod

• After edit the file, restart your apache for it to take effect.
  
  service httpd restart

  1	service httpd restart

Now your apache2 version number will not be shown in common error pages.

Tags: apache, apache server, hide apache version no, hide apache version number, hide apache2 version number

---