Microsoft's new URLScan utility will allow you to disable the header or put in what ever you want (Make it look like Apache or something else).
-----Original Message----- From: Omar Koudsi [mailto:[EMAIL PROTECTED]] Sent: Monday, October 15, 2001 12:17 PM To: Stuart Fraser; [EMAIL PROTECTED] Subject: RE: IIS Header Info There isn't such a feature built in with IIS5 or W2K, but I remember seeing an ISAPI filter on 15seconds.com that removes the header from the HTTP header. (looked for a short while, but couldn't find it) I personally think webserver obscurity is pretty useless, you can easily tell what type of a webserver it is from the 404, directory listing, and apps running on it. ------------------------------------ jeeran.com - Free websites for Arabs -----Original Message----- From: Stuart Fraser [mailto:[EMAIL PROTECTED]] Sent: Fri, October 12, 2001 2:02 AM To: [EMAIL PROTECTED] Subject: IIS Header Info Hi All, Quick & easy question, how do I disable the header information on our IIS box. Obviously if I telnet to port 80 & hit enter a couple of times, it gives me the following: HTTP/1.1 400 Bad Request Server: Microsoft-IIS/5.0 Date: Thu, 11 Oct 2001 23:54:19 GMT Content-Type: text/html Content-Length: 87 I've just found out I'm being audited tomorrow - lol Please can someone advise me on a solution. Thanks in Advance Stuart
