ServerInformation OFF?

[ckizer]

How can I get serverinformation to actually be off? I modified it in httpd.conf however using whois.sc/anydomain.com here you'll still see this with all cpanel hosts:

Apache/1.3.33 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.3.10 FrontPage/5.0.2.2635 mod_ssl/2.8.22 OpenSSL/0.9.7a

How do I hide this?

 

[Aric1]

whois.sc caches results from previous scans, so I wouldn't go by them.

 

[hostultra]

Theres nothing called ServerInformation
So i will assume you mean ServerSignature.

Signature is the signature in server error messages not the headers.
You need to use

ServerTokens ProductOnly

 

[ckizer]

okay i'll use that. Thank you very much. Any downsides?

 

[hostultra]

No downsides that i can think of.
All it does is prevent version numbers and module information being public.

You may also want to set expose_php to off in the php.ini to stop php giving its version number in the headers.