# change/remove info about wowza server when scanning

**URL:** <https://community.wowza.com/t/change-remove-info-about-wowza-server-when-scanning/37496>\
**Category:** Wowza Streaming Engine\
**Created:** [November 5, 2011, 11:00am UTC](https://community.wowza.com/t/change-remove-info-about-wowza-server-when-scanning/37496 "2011-11-05T11:00:56Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Nicolas\_Vanhaute](https://avatars.discourse-cdn.com/v4/letter/n/a4c791/32.png) [@Nicolas\_Vanhaute](https://community.wowza.com/u/Nicolas_Vanhaute)\
**Post date:** [November 5, 2011, 11:00am UTC](https://community.wowza.com/t/change-remove-info-about-wowza-server-when-scanning/37496/1 "2011-11-05T11:00:56Z")

</div>

hi,

is there any possibility to change/remove wowza server page when someone try to access on some port ?

I mean by example : “Wowza Media Server 3 Trial Edition (Expires: nov. 24, 2011) 3.0.2.02 build877”

from scan : “FlashCom 3.5.7 (Wowza Media Server 3 Trial Edition (Expires: nov. 24, 2011) 3.0.2.02 build877 http config)”

On my side I need to let tcp 80 opened to use rtmpt but if a user try from his browser to enter url, he will get message above ☹

so I would like to change it at least.

Thanks

NIcolas

---

<div class="post-metadata">

**Author:** ![Randall\_Auriemma](https://avatars.discourse-cdn.com/v4/letter/r/85e7bf/32.png) [@Randall\_Auriemma](https://community.wowza.com/u/Randall_Auriemma)\
**Post date:** [November 5, 2011, 4:45pm UTC](https://community.wowza.com/t/change-remove-info-about-wowza-server-when-scanning/37496/2 "2011-11-05T16:45:34Z")

</div>

Hi Nicolas,

This is set in conf/VHost.xml. Comment out the HTTPServerVersion HTTPProvider for the port you desire. By default this is enabled on ports 1935, 443, 8086, but not port 80.

---

<div class="post-metadata">

**Author:** ![Richard\_Lanham](https://avatars.discourse-cdn.com/v4/letter/r/c68b51/32.png) [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)\
**Post date:** [August 9, 2012, 1:14pm UTC](https://community.wowza.com/t/change-remove-info-about-wowza-server-when-scanning/37496/3 "2012-08-09T13:14:54Z")

</div>

I think this is Wowza user-agent in this case. I don’t think it is configurable

Richard

---

<div class="post-metadata">

**Author:** ![Richard\_Lanham](https://avatars.discourse-cdn.com/v4/letter/r/c68b51/32.png) [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)\
**Post date:** [August 9, 2012, 3:48pm UTC](https://community.wowza.com/t/change-remove-info-about-wowza-server-when-scanning/37496/4 "2012-08-09T15:48:10Z")

</div>

Or you can change the AuthenticationMethod of that HTTPProvider in the VHost.xml to “admin-basic” to require username and password, which you can provide like this:

```auto
http://username:password@[wowza-address]:1935

```

Richard

---

<div class="post-metadata">

**Author:** ![M\_de\_G](https://avatars.discourse-cdn.com/v4/letter/m/5daacb/32.png) [@M\_de\_G](https://community.wowza.com/u/M_de_G)\
**Post date:** [August 9, 2012, 9:56am UTC](https://community.wowza.com/t/change-remove-info-about-wowza-server-when-scanning/37496/5 "2012-08-09T09:56:50Z")

</div>

Sorry for bumping this old topic but:

I’ve removed the section and never found the version again 🙂 But, since recently i’ve found the versioning again (Server: FlashCom/3.5.7). I believe it came back after upgrading from 2.x to 3.x. The Vhost.xml does not contain the HTTPServerVersion (the section is completely removed).

> HTTP request sent, awaiting response…
> 
> HTTP/1.0 200 OK
> 
> Content-type: text/xml
> 
> Access-Control-Allow-Origin: \*
> 
> Content-Type: text/html
> 
> Connection: Keep-Alive
> 
> Server: FlashCom/3.5.7
> 
> Cache-Control: no-cache
> 
> Content-Length: 78
> 
> Length: 78 [text/xml]
> 
> Remote file exists.
> 
> Any idea?

---

<div class="post-metadata">

**Author:** ![M\_de\_G](https://avatars.discourse-cdn.com/v4/letter/m/5daacb/32.png) [@M\_de\_G](https://community.wowza.com/u/M_de_G)\
**Post date:** [August 9, 2012, 3:28pm UTC](https://community.wowza.com/t/change-remove-info-about-wowza-server-when-scanning/37496/6 "2012-08-09T15:28:34Z")

</div>

> Hi
> 
> I’m afraid you can’t remove the FlashCom version.
> 
> As far as I’m aware its always been there.
> 
> Jason

Now you mention it, this could be the case.

I think I was mistaking by the wowza version number you get if you put [http://wowza-ip:1935](http://wowza-ip:1935) in your browser. That option can be disabled by the HTTPServerVersion.

Is there a way to make this more secure?

when I (or anybody else) perform a scan my Wowza server, it want it go give me a “forbidden” (403) or “not found” (404) by default. Any way to make this possible?

Thanks so far 🙂

---

<div class="post-metadata">

**Author:** ![Randall\_Auriemma](https://avatars.discourse-cdn.com/v4/letter/r/85e7bf/32.png) [@Randall\_Auriemma](https://community.wowza.com/u/Randall_Auriemma)\
**Post date:** [August 9, 2012, 5:13am UTC](https://community.wowza.com/t/change-remove-info-about-wowza-server-when-scanning/37496/7 "2012-08-09T05:13:16Z")

</div>

If you don’t want Wowza to listen on certain ports you can comment out the section in conf/VHost.xml. Or remave a particular port from the ports element. Or you can do something with your firewall.

---

<div class="post-metadata">

**Author:** ![Jason\_Hilton](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/jason_hilton/32/437_2.png) [@Jason\_Hilton](https://community.wowza.com/u/Jason_Hilton)\
**Post date:** [August 9, 2012, 9:55am UTC](https://community.wowza.com/t/change-remove-info-about-wowza-server-when-scanning/37496/8 "2012-08-09T09:55:53Z")

</div>

Hi

I’m afraid you can’t remove the FlashCom version.

As far as I’m aware its always been there.

Jason

---

<div class="post-metadata">

**Author:** ![Nicolas\_Vanhaute](https://avatars.discourse-cdn.com/v4/letter/n/a4c791/32.png) [@Nicolas\_Vanhaute](https://community.wowza.com/u/Nicolas_Vanhaute)\
**Post date:** [November 6, 2011, 9:20am UTC](https://community.wowza.com/t/change-remove-info-about-wowza-server-when-scanning/37496/9 "2011-11-06T09:20:00Z")

</div>

> Hi Nicolas,
> 
> This is set in conf/VHost.xml. Comment out the HTTPServerVersion HTTPProvider for the port you desire. By default this is enabled on ports 1935, 443, 8086, but not port 80.

great, thanks

Nicolas
