Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm running a small apache2 web server, and I'm trying to figure out how to make a customized message for the servertokens, so when somebody does a banner grab, it returns something like "No information for you!". Does anybody know how to do this?

share|improve this question

ServerTokens Prod is essentially that, since "Apache" isn't particularly revealing (and you might as well throw in a ServerSignature Off to hide info on error pages, if you haven't already). Is it insufficient in some way?

share|improve this answer
Thats the way I have it set up now. But I just want to be able to poke fun at anyone who does a banner grab, since I know my friends are going to try. – Cygnus X Apr 11 '12 at 15:52

There is no way to do that without editing source code. See the following blog post for an idea of how to do it

share|improve this answer

I am no longer running apache, but when I was I used a module called Mod_security for various things. One thing it could do is allow you to set a custom ServerSignature as you are asking to do here.

I would hesitate to suggest you install a module to do just that one thing, but since you mention you want to prevent offsite image linking some of the other features mod_security has to offer might be attractive to you.

I can say that from experience mod_security is, in my opinion, a must-have for most public facing linux webservers running Apache.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.