Yo, is there a clean way (without modifying source code) to modify the response headers from tomcat? right now, they give away to much information methinks: Servlet-Engine: Tomcat Web Server/3.1 (JSP 1.1; Servlet 2.2; Java 1.2.2; Linux 2.2.15-4mdksmp i386; java.vendor=Sun Microsystems Inc.) (this info is dumped into the HTTP response by /org/apache/tomcat/request/FixHeaders.java ) I want to be able to strip this so that no banner grabbing will expose my server OS and version. TIA, Sloot.