Questions tagged [headers]

Probably not the tag you want, please use something more specific like http-headers or smtp-headers.

65 questions
1
vote
1 answer

Removing one cookie in proxy_pass of nginx

I'm trying to proxy_pass the whole request coming to my nginx to certain base URL to another upstream server removing server cookie. All other cookies, HTTP headers, the URL itself should be kept as is, sent to the upstream and response passed back…
Alexey
  • 49
  • 2
  • 16
1
vote
1 answer

setup SameSite=none value in Nginx webserver

I need to setup SameSite=none value in Nginx webserver In case of using Nginx as main webserver and non reverse proxy will the below configuration work? Inside server block location { proxy_cookie_path ~(.*) "$1; SameSite=none; secure;…
Georg
  • 11
  • 1
  • 2
0
votes
1 answer

Strict-Transport-Security header, specific questions regarding adding to my Apache 2.4 setup

I have several IP-based virtual hosts that I want to add the Strict-Transport-Security header on. I'm using Apache 2.4 custom compiled. Currently I have two containers for each domain, like so: ... …
Jeff
  • 1,406
  • 3
  • 26
  • 46
0
votes
2 answers

Block all requests except certain header

I'm using CloudFlare in a shared environment and I'm trying to help block non-CloudFlare users who circumvent to my origin IP. Loading up the web page I see the header server: "cloudflare". So I tried the following htaccess code and I get a 403…
Aaron
  • 11
  • 1
0
votes
0 answers

Embedding 3 bytes custom data in IPv4 header and then filter by iptables

In my modified OpenVPN server process, as an intermediate node, I'd need to embed my custom 3 bytes data in the header of every IP packet and then in the same machine (after going through tun) filter those packets by those custom 3 bytes. Where's…
frogatto
  • 103
  • 4
0
votes
0 answers

My Postfix is rewriting From: header for incoming emails with bad From headers

I received some phishing emails, and the From: header contained ONLY a display name. Like : From: Timmy Tester Postfix then delivered the email, but appended its hostname to FIRST PART of the display name / malformed From header. So the recipient…
user145837
  • 361
  • 5
  • 17
0
votes
1 answer

Exim: how to rewrite a header to remove a string like +1234+?

Hi sorry for a bit of a newbie exim question. For historic reasons we have email going through a smart host addressed to something like: johnsmith+12345+@destinaton.com (where 12345 can be any number) We need to understand how to get Exim to…
KeithO
  • 3
  • 1
0
votes
1 answer

Why does all my sites inherit the HTTP header from the main site?

I have two sites on the same Nginx server. The site www.example.com contains HTTP headers, but not the analytics.example.com When I go to the analytics.example.com site there is an error message in the console : Mixed Content: The page at…
ML19
  • 81
  • 1
  • 2
  • 6
0
votes
0 answers

IIS Reverse Proxy: Too Many Redirects and Header Code of 302

[This is a cross post from ESRI's GIS site; I am not getting any luck there] I have not been able to find step by step directions for ArcGIS for Portal and Reverse Proxy which uses IIS as a server. I have a setup in place which mostly work but fails…
IrfanClemson
  • 111
  • 5
0
votes
2 answers

LiteSpeed ignore PHP header 404 status

After moving my website to a webhost which uses LiteSpeed it seems PHP header is ignored. I have tried these variations: $s = "HTTP/1.1 404 Not Found"; $s = "HTTP/1.0 404 Not Found"; $s = "Status: 404 Not Found"; $s =…
Tom
  • 95
  • 6
0
votes
2 answers

add_header not working in Nginx location

So, I've been trying to figure this out for the past 8 hours, but it seems I'm stuck... I have the following Nginx config file: server_tokens off; upstream php-handler { server unix:/var/run/php5-fpm.sock; } server { listen 80; server_name …
Tony
  • 269
  • 4
  • 15
0
votes
1 answer

Is it possible to identify a proxy sever (IP & other headers) as the user who originated the request?

Is it possible to identify a proxy sever (IP & other headers) as the user who originated the request? Example 1 (Standard use case): I have a proxy server a.com that proxies all requests to b.com. Traditionally b.com will receive an X-Forwarded-For…
Eric Uldall
  • 161
  • 2
  • 10
0
votes
1 answer

How do I filter tcpdump results based on a missing header?

My HAProxy adds 'X-Proto: SSL' as a header to requests that are over HTTPS. I'd like to use tcpdump to see the 'Host:' header of all requests that do not have that 'X-Proto: SSL' header. Here's what a sample request looks like with it (captured with…
nowthatsamatt
  • 881
  • 1
  • 8
  • 11
0
votes
1 answer

Which headers take precedence -- the ones set by Nginx or the application server's?

I'm using Nginx on CentOS with a Rails server. I'm confused about how headers get set. If Nginx sets headers and the applicatino server (Ruby on Rails in this case), which one wins out? I have this Nginx server block server { listen 80; …
Dave
  • 155
  • 1
  • 5
  • 17
0
votes
1 answer

nginx regex with capture bug

I'm trying to use regex capture functions for create an Access-Control-Origin header. So y have two main capture, one for the adress of website ( likehttp://example.com) and another for the port user (such as :4200). The idea is having this header…
P0pR0cK5
  • 290
  • 1
  • 6