Improve Apache server security by limiting the information
Typically server have 2 response headers in Apache2 which you want to remove for security reason.
- ServerSignature - used to configure a footer line under the server-generated documents.
- ServerTokens - controls the details which the server sends. The details can include OS and other complied modules.
Implementation Procedure in Apache2
- Run this command sudo nano /etc/apache2/conf-enabled/security.conf
- Within that file, search for SeverTokens and set it to Prod
- Then search for ServerSignature and set it to Off
- Save and close that file. Restart Apache with the command
- sudo systemctl restart apache2
Comments
Post a Comment