drakkarnoir
asked on
Apache Headers
How do I remove response headers from Apache? I tried using mod_headers, and did:
Header remove Server
With no luck, so I tried:
Header set Server "Hiding"
Again, no luck. I want to be able to change these headers, because for example, Google returns:
Response Headers - http://www.google.com/
X-TR: 1
Cache-Control: private
Content-Type: text/html
Server: GWS/2.1
Date: Sun, 07 Nov 2004 05:33:57 GMT
Content-Length: 2325
Which is minimal information, helping in avoid attacks against a server.
I am using Apache2, I am also using mod_security to modify Server but that is all that I can seem to modify/remove...I tried to set Headers within the actual PHP files, but still no luck.
My current headers after trying for the last 5 hours:
Date: Sun, 07 Nov 2004 05:36:09 GMT
Server: Mine
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: private
Keep-Alive: timeout=15, max=74
Content-Type: text/html; charset=ISO-8859-1
Connection: Keep-Alive
Transfer-Encoding: chunked
How can I turn off Keep-Alive and Connection headers? Modify the content-type header to remove the charset?
Header remove Server
With no luck, so I tried:
Header set Server "Hiding"
Again, no luck. I want to be able to change these headers, because for example, Google returns:
Response Headers - http://www.google.com/
X-TR: 1
Cache-Control: private
Content-Type: text/html
Server: GWS/2.1
Date: Sun, 07 Nov 2004 05:33:57 GMT
Content-Length: 2325
Which is minimal information, helping in avoid attacks against a server.
I am using Apache2, I am also using mod_security to modify Server but that is all that I can seem to modify/remove...I tried to set Headers within the actual PHP files, but still no luck.
My current headers after trying for the last 5 hours:
Date: Sun, 07 Nov 2004 05:36:09 GMT
Server: Mine
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: private
Keep-Alive: timeout=15, max=74
Content-Type: text/html; charset=ISO-8859-1
Connection: Keep-Alive
Transfer-Encoding: chunked
How can I turn off Keep-Alive and Connection headers? Modify the content-type header to remove the charset?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
hernst42
very hard to say if the hints I provided helped or not as there was no feedback at all and no other comments have been made.