LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 03-12-2004, 12:34 AM   #1
johnyy
Member
 
Registered: Jun 2003
Posts: 92

Rep: Reputation: 15
apache server header


hello, i done a lot a research on apache header.. what i try to do
it's take the server header out when the web server reponse to the
client.. i did it(it's working fine now), but i don't know if there
any harm to the web server.. or maybe cause some internal error
something like that down the road.... so i like to get your
advices on that.. here what i did ..

apache version 1.3.29
file: src/main/http_protocol.c
i commment line from 1605-->1613

/* if (r->proxyreq) {
const char *server = ap_table_get(r->headers_out, "Server");
if (server) {
ap_send_header_field(r, "Server", server);
}
}
else {
ap_send_header_field(r, "Server", ap_get_server_version());
}
*/
also here's my new server header

(Response Status) HTTP/1.1 200 OK
Accept-Ranges bytes
Connection close
Content-Encoding gzip
Content-Length 2762
Content-Type text/html
Date Thu, 11 Mar 2004 09:44:41 GMT
ETag "8f78c-4b23-3ca3437a"
Last-Modified Thu, 28 Mar 2002 16:23:22 GMT

it's seen working fine now...
please give some advices

thanks
 
Old 03-12-2004, 12:40 AM   #2
jon_k
Member
 
Registered: Jul 2003
Location: Fort Worth, Texas
Distribution: Mepis Linux 2004
Posts: 547

Rep: Reputation: 30
Well, I'd like to know why exactly you did that, why don't you want the http headers to show the version of apache?
 
Old 03-12-2004, 01:57 AM   #3
johnyy
Member
 
Registered: Jun 2003
Posts: 92

Original Poster
Rep: Reputation: 15
just security....
because bug always found, dont' want to let people know what you running......
yahoo, google they modified there own header too...
http://uptime.netcraft.com/up/graph/?host=www.yahoo.com
http://uptime.netcraft.com/up/graph/...www.google.com
 
Old 03-12-2004, 07:51 AM   #4
markus1982
Senior Member
 
Registered: Aug 2002
Location: Stuttgart (Germany)
Distribution: Debian/GNU Linux
Posts: 1,467

Rep: Reputation: 46
This is called STO (security through obscurity) and it definately does not work. You should hide the version number maybe but not just like everything...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
FAQ: Internal Server Error / Premature End of Script Header / MS-DOS Carriage Return rebel Red Hat 2 04-30-2005 04:11 PM
What email program can work with email header on pop3 server TruongAn Linux - Software 0 01-13-2005 12:48 PM
Apache config file to add header and footer mindstormsguy Linux - Software 2 05-02-2004 01:48 PM
Apache file "HEADER" doesn't work! vbradley Linux - Software 0 06-07-2003 12:30 AM
Error reading WWW server response (HTTP Header)?? cuboctahedron Linux - Newbie 7 02-20-2003 05:10 AM


All times are GMT -5. The time now is 06:37 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration