Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've already located this question on server fault:

Server Fault Question

But there is no answer. Does anyone have any advice on how to fix the issue? We're running 2003 Server R2 Ent, latest service pack is applied, IIS 6.0

Here's what the compliance company is saying:

Synopsis : This web server leaks a private IP address through its HTTP headers. Description : This may expose internal IP addresses that are usually hidden or masked behind a Network Address Translation (NAT) Firewall or proxy server. There is a known issue with Microsoft IIS 4.0 doing this in its default configuration. This may also affect other web servers, web applications, web proxies, load balancers and through a variety of misconfigurations related to redirection. See also : articles/Q218/1/80.ASP

Any ideas?


share|improve this question
I'm surprised they care; I'll bet your using a standard Private IP space like 99% of everyone else. – Chris S Aug 30 '10 at 20:25
up vote 2 down vote accepted

Umm... have you read the KB and it's companion article for IIS6?

share|improve this answer
Yes, I followed intructions, server is on the latest service pack. I don't know how to get a hold of the "Hotfix" they speak about after the service pack. Does anyone have a link to this? – I.T. Support Aug 30 '10 at 20:24
Ok, so the hotfix should have been included in the latest service pack. So the next section requires you make a reg edit to add the hostname you want to use. What host name would I need to put in there? Is this just a reference to the public IP address? – I.T. Support Aug 30 '10 at 20:28
You would use either the UseHostName if you want the server to always send it'd FQDN, such as internalname.internaldomain.local or use the SetHostName if you want the server to send a specific name, such as – joeqwerty Aug 30 '10 at 21:00
What if I need different host names for different IIS sites? Would I add a custome header through IIS config? – I.T. Support Aug 30 '10 at 21:17
I can't help you with that one. You'll need to do some research on it, sorry. – joeqwerty Aug 30 '10 at 23:37

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.