How do I remove response headers from Apache? I tried using mod_headers, and did:
Header remove Server
With no luck, so I tried:
Header set Server "Hiding"
Again, no luck. I want to be able to change these headers, because for example, Google returns:
Response Headers - http://www.google.com/
Date: Sun, 07 Nov 2004 05:33:57 GMT
Which is minimal information, helping in avoid attacks against a server.
I am using Apache2, I am also using mod_security to modify Server but that is all that I can seem to modify/remove...I tried to set Headers within the actual PHP files, but still no luck.
My current headers after trying for the last 5 hours:
Date: Sun, 07 Nov 2004 05:36:09 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Keep-Alive: timeout=15, max=74
Content-Type: text/html; charset=ISO-8859-1
How can I turn off Keep-Alive and Connection headers? Modify the content-type header to remove the charset?