# Server signature **URL:** \ **Category:** NGINX\ **Created:** [December 21, 2010, 10:39pm UTC](https://www.ruby-forum.com/t/server-signature/200777 "2010-12-21T22:39:07Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Dobai-Pataky\_BSSSSl](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/77aa72/32.png) [@Dobai-Pataky\_BSSSSl](https://www.ruby-forum.com/u/Dobai-Pataky_BSSSSl)\ **Post date:** [December 21, 2010, 10:39pm UTC](https://www.ruby-forum.com/t/server-signature/200777/1 "2010-12-21T22:39:07Z")
Hi all, We are working on a project for a customer. For political reasons, the customer will refuse to have any non-IIS web servers. Since we deliver the service as SaaS, the customer can only see the OS fingerprint and server signature (together with a few other things like error pages). For the OS signature we are able to change it on the fly with a security/network appliance and make it looks unknown, but we now need to fake the web server signature. Rather than adding a proxy such as varnish in front, I am looking for the way to directly patch the source code to change the server signature. Could someone point me the file name to patch to get this done? As for curious, I work behind the scene so the end-user does not know my name 🙂 Thanks! Regards, – Simon ---
**Author:** ![Simon\_Leins](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/bbce88/32.png) [@Simon\_Leins](https://www.ruby-forum.com/u/Simon_Leins)\ **Post date:** [December 21, 2010, 11:26pm UTC](https://www.ruby-forum.com/t/server-signature/200777/2 "2010-12-21T23:26:21Z")
Hi, On 21/12/2010 23:37, Simon Leins wrote: > For the OS signature we are able to change it on the fly with a > security/network appliance and make it looks unknown, but we now need > to fake the web server signature. Rather than adding a proxy such as > varnish in front, I am looking for the way to directly patch the > source code to change the server signature. > > Could someone point me the file name to patch to get this done? > You can edit the server name values by changing ‘ngx\_http\_server\_string’ > and ‘ngx\_http\_server\_full\_string’ in > src/http/ngx\_http\_header\_filter\_module.c. Note the NGINX\_VER is set in > nginx.h Cheers, Marcus. ---
**Author:** ![Simon\_Leins](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/bbce88/32.png) [@Simon\_Leins](https://www.ruby-forum.com/u/Simon_Leins)\ **Post date:** [December 21, 2010, 11:45pm UTC](https://www.ruby-forum.com/t/server-signature/200777/3 "2010-12-21T23:45:09Z")
On 21 Dez 2010 21h37 WET, [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote: > For the OS signature we are able to change it on the fly with a > security/network appliance and make it looks unknown, but we now > need to fake the web server signature. Rather than adding a proxy > such as varnish in front, I am looking for the way to directly patch > the source code to change the server signature. You can either do that or use this 3rd party module: > **[GitHub - nginxinc/nginx-wiki: ARCHIVED -- Source for the now archived NGINX Wiki...](https://github.com/nginxinc/nginx-wiki)** > > ARCHIVED -- Source for the now archived NGINX Wiki section of https://www.nginx.com — appa ---
**Author:** ![Simon\_Leins](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/bbce88/32.png) [@Simon\_Leins](https://www.ruby-forum.com/u/Simon_Leins)\ **Post date:** [December 21, 2010, 11:50pm UTC](https://www.ruby-forum.com/t/server-signature/200777/4 "2010-12-21T23:50:13Z")
Thank you both. Cheers, – Simon 2010/12/21 Eugaia [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) > * * * > > nginx mailing list > [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) > [mailman.nginx.org archive](http://nginx.org/mailman/listinfo/nginx) 2010/12/21 Antnio P. P. Almeida [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) ---
**Author:** ![Simon\_Leins](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/bbce88/32.png) [@Simon\_Leins](https://www.ruby-forum.com/u/Simon_Leins)\ **Post date:** [December 22, 2010, 1:17am UTC](https://www.ruby-forum.com/t/server-signature/200777/5 "2010-12-22T01:17:42Z")
On 12/21/2010 10:37 PM, Simon Leins wrote: > security/network appliance and make it looks unknown, but we now need to > fake the web server signature. Rather than adding a proxy such as varnish > in front, I am looking for the way to directly patch the source code to > change the server signature. > > Could someone point me the file name to patch to get this done? > > As for curious, I work behind the scene so the end-user does not know my > name 🙂 Not sure what that last bit is supposed to mean but I hope you realize that you can get into big trouble contractually if you misrepresent the service to your customer. This might not sound like a big deal from a technical perspective but if anything goes wrong than you can basically be accused of fraud quite easily. Regards, Dennis ---
**Author:** ![Simon\_Leins](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/bbce88/32.png) [@Simon\_Leins](https://www.ruby-forum.com/u/Simon_Leins)\ **Post date:** [December 22, 2010, 9:37am UTC](https://www.ruby-forum.com/t/server-signature/200777/6 "2010-12-22T09:37:50Z")
Hi Dennis, Don’t you worry about this. All is under control - we are first just going to do a PoC to the customer for about a 3 days and have results measured/benchmarked with Gomez and then when they will see the result, the price and all, they will likely approve the best option. Not the first time we deal so with them and that we do surprise them in good. – Simon 2010/12/22 Dennis J. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)