[root@izbp18tnigcymjlz2mm69lz conf]# curl -i 127.0.0.1 HTTP/1.1 200 OK Server: nginx/1.6.3 <<<这个位置明显暴露服务器版本及软件名称 Date: Sun, 27 Oct 2019 11:40:44 GMT Content-Type: text/html Content-Length: 612 Last-Modified: Sun, 15 Sep 2019 12:40:27 GMT Connection: keep-alive ETag: "5d7e313b-264" Accept-Ranges: bytes <!DOCTYPE html> <html> <head> <title>Welcome to nginx!</title> <style> body { 35em; margin: 0 auto; font-family: Tahoma, Verdana, Arial, sans-serif; } </style> </head> <body> <h1>Welcome to nginx!</h1> <p>If you see this page, the nginx web server is successfully installed and working. Further configuration is required.</p> <p>For online documentation and support please refer to <a href="http://nginx.org/">nginx.org</a>.<br/> Commercial support is available at <a href="http://nginx.com/">nginx.com</a>.</p> <p><em>Thank you for using nginx.</em></p> </body> </html>
隐藏版本号
在nginx.conf
server_tokens off;
http {
server_tokens off;
}
server_tokens官方说明
syntax: server_tokens on|off; on w为开启状态。off为关闭状态。 default: server_tokens on 不做配置默认参数 context: http,server,location 为可放的位置
2、更改源码隐藏软件及版本号
需要修改3个源文件
- nginx.h
- ngx_http_header_filter_module.c
- ngx_http_special_response.e