Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Do you mask Apache information?

[xperience]

Do you mask Apache information in httpd.conf?

Are there any downsides to doing this? It is worth it?

Simon

[Angel78]

1. Yes

2. If you are using WHM/Cpanel it wont display if your current (apache..etc) is the latest one (you will not know if you have to run ./easyapache, but you can revert back easiliy = just two lines, and if everything is ok, change back = hide apache info.

[phpdeveloper]

You can mask it, but it's no good actually. Just a way to stop the most stupid script kiddies. Smater ones can't be fooled by this little trick.

[HostMonger]

There are lots and lots of stupid script kiddies...

[phpdeveloper]

Yeah that's true

[dysk]

Hi-
I don't. I just keep my apache updated. No reason to mask the version if you have nothing to hide.
Anyway, it only provides a dubious amount of security, as someone could see a masked version number and try many attacks until they get it right...

Regards,
Erek Dyskant
Unix Consultant