Apache Info = Security

[Creazioni]

RIGHT!
I HOPE cpanel alert APACHE UPDATE like other alert and not like now that i have to have servesignature ON to look APACHE ALERT

cPanel.net Support Ticket Number:

[pirania1]

bump

cPanel.net Support Ticket Number:

[sexy_guy]

test

cPanel.net Support Ticket Number:

[GetWired]

This looks like a 2 month old thread. Anyways, I made a little security checklist and its working very very well at rachshack.

http://forum.rackshack.net/showthrea...threadid=30333

Take a gander. The more secure your server is, the better off other people on your network are.

cPanel.net Support Ticket Number:

[Radio_Head]

Originally posted by GetWired
This looks like a 2 month old thread. Anyways, I made a little security checklist and its working very very well at rachshack.

http://forum.rackshack.net/showthrea...threadid=30333

Take a gander. The more secure your server is, the better off other people on your network are.

cPanel.net Support Ticket Number:

GOOD JOB !!

cPanel.net Support Ticket Number:

[Juanra]

In case someone is interested:

http://html.conclase.net/cp/scripts/...kens-0.1.1.tgz

Allows you to specify a custom Apache version string, except
for connections coming from 127.0.0.1, so WHM will still get the whole module list (other local users will too, but they are local anyway).

As always any feedback is welcome.

[jamesbond]

Originally posted by Juanra
In case someone is interested:

http://html.conclase.net/cp/scripts/...kens-0.1.1.tgz

Allows you to specify a custom Apache version string, except
for connections coming from 127.0.0.1, so WHM will still get the whole module list (other local users will too, but they are local anyway).

As always any feedback is welcome.

Juanra, just to make sure..this mod doesn't make any modifications to other files?
To disable it I can just uncomment the mod in httpd.conf, correct?

Feedback:
You could elaborate on the installation instructions

[Juanra]

Originally posted by jamesbond
Juanra, just to make sure..this mod doesn't make any modifications to other files?

It only modifies httpd.conf (AddModule and LoadModule lines) and also adds the module (.so file) in the apache/libexec directory.

To disable it I can just uncomment the mod in httpd.conf, correct?

You should also comment the FakeVersionString line in httpd.conf, unless you enclose it in an IfModule block like this:

<IfModule mod_server_tokens.c>
FakeVersionString "Apache"
</IfModule>

Feedback:
You could elaborate on the installation instructions

Tell me something I don't know

Thanks

[theshark]

Has anyone tried this? I can't get it to work....

make all - successful
make install - sucessful

I put into my httpd.conf

<IfModule mod_server_tokens.c>
FakeVersionString "Apache"
</IfModule>

then

/etc/rc.d/init.d/httpd stop
/etc/rc.d/init.d/httpd start

I'm using the mod_server_tokens-0.1.1 file and it actually works backwards, whm see's my masked name.

Thanks

[Juanra]

Wait I need to take a course on QA...

I don't know why I had assumed the requests would come from localhost, when they are actually coming from cpanel.net.

You may download version 0.1.3 from

http://html.conclase.net/cp/scripts/#apache

It now allows you to specify an IP or a domain, so it needn't specifically be 127.0.0.1 as before. The new directives should be something like:

<IfModule mod_server_tokens.c>
FakeVersionString "Apache"
ShowRealVersionStringTo "cpanel.net"
</IfModule>

Thank you.

[bwwt]

Hi guys, quick question:

If my Cpanel has auto-upgrade enabled, will it still be able to update any software that is out of date (with the masking on)? Thanks!

[Angel78]

yes it will.