[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] Changing the Apache banner



On Thu, 31 Jan 2002, R.Milne wrote:

> After reading
> http://httpd.apache.org/docs/mod/core.html#servertokens
>  I noticed the following in the compatibility section
> "the ProductOnly keyword is only available in versions later than 1.3.12 "
>
> To my knowledge the Raq3 comes with Apache 1.3.6.
> The "Minimal" keyword
> (eg. ServerTokens Minimal)
> Should make the banner read 'Apache/1.3.* '

I have a RaQ4 and it runs 1.3.12, in which case I am not able to use the
ProductOnly keyword.  When I used Minimal, I got something that still
identified my server as a Cobalt.

"Server: Apache/1.3.12 Cobalt"

I retreived that using "curl -I http://domain.com/"; from my BSD box.

-- 

Matt Barton
Webexcellence
matt@xxxxxxxxxx
Phone:  317.423.3548 x22
Fax:  317.423.8735
www.webexc.com