Thread: Re: [mod-security-users] Bug in mod_security-1.8.4 and Apache 1.3.31
Brought to you by:
victorhora,
zimmerletw
From: Jim H. <jim...@rc...> - 2004-09-28 20:06:33
|
Since you compiled the software yourself, why don't you edit the apache.h file and change the identifying strings yourself. Why not hide your server better and not give any valid information out. Call it mysever beta 9.9. Jim ---- Original message ---- >Date: Tue, 28 Sep 2004 21:50:45 +0200 (CEST) >From: ale...@ss... >Subject: [mod-security-users] Bug in mod_security-1.8.4 and Apache 1.3.31 >To: mod...@li... > >I've compiled and installed Apache 1.3.31 and mod_security, and the option >SecServerSignature doesn't work... > >the banner still remain Apache/1.3.31 and not Microsoft IIS/4 as it should >be... > >In error_log file, I can read : [error] SecServerSignature: not enough >space to copy new signature > >Thanks for ansvers > >AlexRezid > > >------------------------------------------------------- >This SF.net email is sponsored by: IT Product Guide on ITManagersJournal >Use IT products in your business? Tell us what you think of them. Give us >Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more >http://productguide.itmanagersjournal.com/guidepromo.tmpl >_______________________________________________ >mod-security-users mailing list >mod...@li... >https://lists.sourceforge.net/lists/listinfo/mod-security- users |
From: <ale...@ss...> - 2004-09-28 20:17:08
|
I tried it, but got a problem with apxs support at compil time... It found one of mine errors in my config file : I've put : ServerTokens Minimal but "Full" setting is required for that.. Now, I get in log file : [notice] Microsoft-IIS/4.0 configured -- resuming normal operation but my banner is still : Apache/1.3.31 Server at 192.168.0.1 Port 80 Did u know why ? Alex > Since you compiled the software yourself, why don't you edit > the apache.h file and change the identifying strings > yourself. Why not hide your server better and not give any > valid information out. Call it mysever beta 9.9. > > Jim > > > ---- Original message ---- >>Date: Tue, 28 Sep 2004 21:50:45 +0200 (CEST) >>From: ale...@ss... >>Subject: [mod-security-users] Bug in mod_security-1.8.4 and > Apache 1.3.31 >>To: mod...@li... >> >>I've compiled and installed Apache 1.3.31 and mod_security, > and the option >>SecServerSignature doesn't work... >> >>the banner still remain Apache/1.3.31 and not Microsoft > IIS/4 as it should >>be... >> >>In error_log file, I can read : [error] SecServerSignature: > not enough >>space to copy new signature >> >>Thanks for ansvers >> >>AlexRezid >> >> >>------------------------------------------------------- >>This SF.net email is sponsored by: IT Product Guide on > ITManagersJournal >>Use IT products in your business? Tell us what you think of > them. Give us >>Your Opinions, Get Free ThinkGeek Gift Certificates! Click > to find out more >>http://productguide.itmanagersjournal.com/guidepromo.tmpl >>_______________________________________________ >>mod-security-users mailing list >>mod...@li... >>https://lists.sourceforge.net/lists/listinfo/mod-security- > users > |
From: Ivan R. <iv...@we...> - 2004-09-28 20:41:30
|
> but my banner is still : > Apache/1.3.31 Server at 192.168.0.1 Port 80 Isn't that what is displayed at the bottom of an error page? For that you need to set "ServerSignature" to "Off". The banner is in the Server response header. -- ModSecurity (http://www.modsecurity.org) [ Open source IDS for Web applications ] |