Q. How do I hide the Apache version number under CentOS Linux 5 server?
A. You can easily hide Apche (httpd) version number and other information. There are two config directives that controls Apache version. The ServerSignature directive adds a line containing the Apache HTTP Server server version and the ServerName to any server-generated documents, such as error messages sent back to clients. ServerSignature is set to on by default. The ServerTokens directive controls whether Server response header field which is sent back to clients includes a description of the generic OS-type of the server as well as information about compiled-in modules. By setting this to Prod you only displays back Apache as server name and no version number displayed back.
Open your httpd.conf file using text editor such as vi:
vi httpd.conf
Append/modify config directive as follows:
ServerSignature Off
ServerTokens Prod
Save and close the file. Restart Apache web server:
# /etc/init.d/httpd restart
🐧 4 comments so far... add one ↓
OpenSSH Hide Version Number From Clients
Linux / UNIX View Only Configuration File Directives…
How to hide Nginx version on Linux and Unix
How To Hide BIND DNS Sever Version
How to hide PHP 5/7 version when using Nginx
Linux install and configure pound reverse proxy for…
FreeBSD Install and Configure Apache Web Server
| Category | List of Unix and Linux commands |
|---|---|
| Disk space analyzers | df • ncdu • pydf |
| File Management | cat • tree |
| Firewall | Alpine Awall • CentOS 8 • OpenSUSE • RHEL 8 • Ubuntu 16.04 • Ubuntu 18.04 • Ubuntu 20.04 |
| Network Utilities | NetHogs • dig • host • ip • nmap |
| OpenVPN | CentOS 7 • CentOS 8 • Debian 10 • Debian 8/9 • Ubuntu 18.04 • Ubuntu 20.04 |
| Package Manager | apk • apt |
| Processes Management | bg • chroot • cron • disown • fg • jobs • killall • kill • pidof • pstree • pwdx • time |
| Searching | grep • whereis • which |
| User Information | groups • id • lastcomm • last • lid/libuser-lid • logname • members • users • whoami • who • w |
| WireGuard VPN | Alpine • CentOS 8 • Debian 10 • Firewall • Ubuntu 20.04 |
thanks so much
best
Hi,
Good article thanks for that . but when I tried some like this
ServerSignature Off
ServerTokens Prod
# /etc/init.d/httpd restart
It is still showing as
server:Apache
before following the above procedure it used to show server version and some other details . I am able to hide , but I want to hide server:Apache also , any help will be great appreciation
regards
Verma
Hi Verma,
Did you got solution for that ? kindly share it to me, am also facing this same issue
@ Verma, this will only remove apache version name