Welcome to the blog of mechanised.com

This blog is mainly a technical repository of information on Virtualisation tools and management for our hosting service.

Also for HP's Bladesystem that we use at both our datacentres.

Other articles are also included on .Net development and MS SQL Server as well as other interesting things we come across.

Friday 16 April 2010

Removing Linux server headers

Quick reminder to remove Apache and PHP server headers:

Edit /etc/httpd/conf/httpd.conf
Find ServerTokens and change to ServerTokens Prod

Edit /etc/php5/php.ini
Find expose_php and change to expose_php = Off

This will make sure fingerprinting a server for vulnerabilities is slightly reduced.

No comments: