Get your server issues fixed by our experts for a price starting at just 25 USD/Hour. Click here to register and open a ticket with us now!

Author Topic: How to fully disable Apache from displaying header details?  (Read 2219 times)

0 Members and 1 Guest are viewing this topic.

Jithin

  • Guest
How to fully disable Apache from displaying header details?
« on: November 01, 2013, 06:14:09 pm »
Hi Guys,

Disabling Apache header is one of the best security practices. I'll show you how to do this.

1) Open your main apache configuration file. You can see two directive - ServerSignature and ServerTokens. Change it as show below.

ServerSignature off

ServerTokens Prod

2) Also add the below entries somewhere in it to disable Apache Last Modified header.

<filesMatch ".*$">
Header unset Last-Modified
</filesMatch>


3) Restart the apache service.

That's it! You have fully disabled the Apache header.