Questions tagged [host-headers]

The Host header is an HTTP header needed when multiple sites share a single IP address. See also http-headers.

The Host header is an HTTP header needed when multiple sites share a single IP address.

The Host header was first introduced as an optional header in HTTP/1.0. In HTTP/1.1 the header was changed from optional to mandatory.

See also and .

38 questions
0
votes
1 answer

Why is this host header going to another site?

I have two websites: Prod and Train In my hosts file I have two entries: xxx.xx.xxx.xxx prod.site.com xxx.xx.xxx.xxx train.site.com I have two separate websites set up in IIS7, Prod and Train. The Prod site has the following bindings: http …
Brandon
  • 451
  • 7
  • 22
0
votes
1 answer

CISCO ASA 5505 Base Licence - Ability to interpret http request headers (host headers)

Base licence configured CISCO ASA 5505 is not capable of routing based on interpretation of the inbound http request headers - affectively host header redirect - am I correct? If I am correct will an upgrade from the base licence help me - or is…
Klaptrap
  • 157
  • 12
0
votes
1 answer

Host Name binding not working with wildcard (all) IP Address on IIS10

I am trying to configure a site binding on IIS10. I want to be able to run multiple sites on the same ports and differentiate the sites by their host header. For some reason IIS does not seem to resolve a host-name binding unless a specific…
Malachy
  • 101
  • 1
0
votes
1 answer

Invalid HTTP_HOST header. NGINX config not preventing localhost invalid headers from IP port scanners hitting django

I am getting an Invalid Host header error from my server and I am unsure how to address it. The errors request URL is https://127.0.0.1:8000 and the obvious suggestion is to add localhost to my (using django) ALLOWED hosts. However I have read that…
Atayls
  • 1
  • 2
0
votes
0 answers

Host Header Injection in test lab

Trying to see if a server (in test lab) is vulnerable to host header injection or not. In second scenario where I insert host header as "www.cow.com", still get 302 Found. Does this mean this is vulnerable to host injection ? If it were not, would I…
Pamelaxyz
  • 3
  • 2
0
votes
1 answer

Certificate SNI and IIS host header

Context: IIS website with hostname header configured and TLS certificate. When a client initiates a connection to the specified site, is this the right flow ? Client (browser) performs DNS lookup TCP connection is established to the server Client…
Mario
  • 3
  • 1
0
votes
1 answer

UseCanonicalName On applied however host of request header still wasn't change

I had an issue with website redirection and I found that my rewritecond input= 'www.example.com' and my request header host = 'example.com'. So I try to apply UseCanonimalName On in vhost where my ServerName define as 'www.example.com' by hoping…
-1
votes
2 answers

Determine which server in VM environment to forward request to based on host header(s) on one network adapter

As the question title states: I'm trying to figure out how to discern which web server to pass network traffic to based on the host header of said request. I'm working with one network adapter on the host server, to which all of my guest OS's…
Erutan409
  • 109
  • 3
1 2
3