How to hide web server name and openssh version on linux when scanning server ports?
when i nmap'ed(nmap -A -T4 192.168.40.12) ip server from the outside, the one shows:
Starting Nmap 4.62 ( http://nmap.org ) at 2009-11-05 14:11 IRST
LUA INTERPRETER in nse_init.cc:763: /usr/share/nmap/scripts/robots.nse:4: module 'http' not found:
no field package.preload['http']
no file '/usr/share/nmap/nselib/http.lua'
no file './http.lua'
no file '/usr/local/share/lua/5.1/http.lua'
no file '/usr/local/share/lua/5.1/http/init.lua'
no file '/usr/local/lib/lua/5.1/http.lua'
no file '/usr/local/lib/lua/5.1/http/init.lua'
no file '/usr/lib/nmap/nselib-bin/http.so'
no file './http.so'
no file '/usr/local/lib/lua/5.1/http.so'
no file '/usr/local/lib/lua/5.1/loadall.so'
SCRIPT ENGINE: Aborting script scan.
Interesting ports on 192.168.40.12:
Not shown: 1710 closed ports
PORT STATE SERVICE VERSION
22/tcp open ssh **OpenSSH 3.9p1** (protocol 1.99)
53/tcp open domain dnsmasq 2.47
80/tcp open http **Apache httpd**
222/tcp open ssh **OpenSSH 3.9p1** (protocol 1.99)
8081/tcp open http CherryPy httpd 2.3.0
MAC Address: 00:10:F3:0F:59:B7 (Nexcom International Co.)
Device type: firewall
Running: IPCop Linux 2.4.X
OS details: IPCop firewall 1.4.10 - 1.4.15 (Linux 2.4.31 - 2.4.34)
Network Distance: 1 hop
OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 8.032 seconds
I modify httpd.conf and change two line
ServerSignature Off
ServerTokens Prod
and restart apache server but it still shows me apache name
Could any one help me on this!