I know you can hide certain information using DominoNoBanner=1, but can you prevent Domino 6.0 from responding with the Server Type?
C>
Subject: You can create a “HTTP Response Header” rule to overwrite what gets sent out as the default.
Subject: Anyone have an example?
Never used these before and don’t want to hose the web site while trying to secure it!
C>
Subject: RE: Anyone have an example?
Hello,These 2 documents should help:
and
Subject: Thanks Ashley…
…read these too. Unfortunately the context sensitive help on the Http Response Header form appears to be incorrect.
C>
Subject: Search this forum and you’ll find examples
I posted one some time ago:
Thomas - IBM
Subject: Cant get this to work…
I have added the Web Site Document, and added the HTTP Response Header Document as follows:
Description: Replace Server Tag for Security
Type of rule: HTTP response headers
Incoming URL pattern: /*
HTTP response codes: 200, 206, 302
Expires header: Don’t add header
Custom headers:
Name: Server
Value: Company Name Here
Override: Checked
I then restarted http and tested using HTTP Header Viewer - yet I still see:
HTTP/1.1 200 OK
Server: Lotus-Domino
Date: Tue, 18 Nov 2003 17:32:06 GMT
Connection: close
Expires: Tue, 01 Jan 1980 06:00:00 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 3662
Pragma: no-cache
Is there something else I need to set for the rules to take effect?
C>
Subject: Found answer to my own question!
Load Internet configurations from Server\Internet Sites documents:
was still set to Disabled on the Server Document. Changed it to Enabled and restarted http - everything now works as expected.
Thanks all for assistance.
C>