2008-04-02 13:30:57
Hy,
I can't access atutor.ca through my firewall due to an error in the header of the request.
See the attached file.
The firewall doesn't accept it because of this error. It's the only website that I have a problem with (I confirmed it's not because of our firewall settings).
2008-04-03 08:48:10
We see the characters, and we're investigating.
I'd be curious what the firewall is blocking. This problem has not been reported by anyone else.Which firewall, and which OS.
2008-04-11 14:22:39
I have a hard time to get the information from my security team. I let you know as soon as I get it.
Thanks
2008-04-15 08:06:18
Hi,
My security team is trying different configurations to access your site but they asked me if you could check on one particular parameter. Here it is:
The server header from the web server is sending some non-standard characters. The Apache web server is likely configured to send out full server information. The website administrator might be able to prevent this by setting "ServerTokens" to "OS" in his httpd.conf file.
Two things:
- Could you tell me what is your setting now.
- Could you change it to "OS" if it's not the case.
Thanks
2008-04-15 08:37:16
I've switched ServerToken from FULL to OS. Let us know ig that helps.
2008-04-15 08:43:36
Hi,
Perfect, it's working fine
Thank you