0
votes
0answers
38 views

Apache not return allow header in OPTIONS method

I try to get allow header form apache server. I sended request with curl. The server return headers but not "header allow" header: $ curl -v -X OPTIONS 10.0.0.1 * Rebuilt URL to: 10.0.0.1/ * Hostname ...
7
votes
3answers
221 views

What's wrong with this HTTP POST request?

I'm trying to fuzz a server using the Sulley fuzzing framework. I observe the following stream in Wireshark. The error talks about a problem with JSON parsing, however, when I try the same HTTP POST ...
1
vote
1answer
224 views

Apache: Force HTTP 1.1 or Persistent/KeepAlive connections for HTTP 1.0 requests

I want to force Keep Alive or Persistent connections for all HTTP requests on my Apache 2.2.3 server running on RHEL 5.8. A lot of web crawlers are using HTTP 1.0 for some reason, and I would like to ...
0
votes
1answer
98 views

Issues with authenticating through HTTP POST

I am currently investigating an issue with our web authentication server not working for a small subset of users. Our method of authentication involves sending a hash through an HTTP POST. My ...
0
votes
1answer
103 views

How to print out all request headers of HTTP requests on the server side?

I have a HAProxy configuration which balances requests to many servers. I want to compare the outgoing request headers when requests go thru HAProxy to the ones I would make directly to my servers. ...
0
votes
2answers
164 views

Can't get nginx to reply to ab with compressed content

ab -n 1 -H 'Accept-Encoding: gzip, deflate' http://mywebsite.com/ This always returns the uncompressed content (I can see that both from its size and because I'm sniffing the traffic with ngrep). ...
1
vote
2answers
3k views

Human readable format for http headers with tcpdump

I would like to view the HTTP headers sent from Apache (listening on port 80) to Tomcat (on port 4080) in a Linux machine. According to Wikipedia, Header fields are colon-separated name-value ...
1
vote
1answer
157 views

Why does this HTTP header configuration cause browsers to always perform If-Modified-Since requests?

On our server, we have configured http response headers as follows: Cache-Control:max-age=28800, must-revalidate # (8 hours) Connection:Keep-Alive Date:Wed, 24 Apr 2013 21:36:19 GMT ...
-1
votes
1answer
125 views

Do I need to handle chunked HTTP requests if I only work with GET requests? [closed]

I am writing a Netty server that handles HTTP GET requests from the browser to serve scripts or pixels. My understanding is that there is no reason why I would receive chunked requests as all I ...
0
votes
0answers
76 views

Where do I specifiy custom HTTP range-header entities and the necessary logic behind an entitiy?

I have a large JSON file which consists of xyz records. I'm looking for a way to retrieve parts of the file and have been reading the http-specs on how to define HTTP range-headers in Apache. The ...
-2
votes
1answer
64 views

Why is there a redundancy in HTTP status headers? [closed]

I'd like to learn something from the design of HTTP protocol - why is there, for example, "Not found", following the "404" code? Wouldn't the number itself be sufficient?
1
vote
1answer
296 views

Blocking HEAD, DELETE, etc. with lighttpd

So I have lighttpd installed and the site it runs only needs to respond to GET requests. I was wondering how I can return 405 responses with Allow: GET headers to anything but GET requests using ...
2
votes
2answers
118 views

One single page showing 3 requests (also printing the headers)

Someone in my studio designed a webpage some years ago, and now the client decided to change the server (he moved to a Linux Apache server running Gen2 SMP, 64 bits, PHP version 5.3.8, Standard MYSQL ...
1
vote
2answers
504 views

Http header 304 and caching?

Our company uses these settings( don't ask me why) - for every request they want a new request from server. this is an intranet system which uses only IE. They defined it in : We also have ...
2
votes
1answer
2k views

Nginix proxy caching - how to check if it is working?

I have set up my nginx.conf file to use proxy caching from tutorials I have found online. However, I am trying to figure out how to check if it is actually working. I've read somewhere that adding ...
1
vote
3answers
591 views

HTTP/1.1 Status Codes 400 and 417, cannot choose which

I have been referred to here that it might be of better help, I've got a processing file which handles the user sent data, before that, however, it compares the input from client to the expected ...
1
vote
2answers
5k views

why i cannot download jdk from oracle web site directly without AuthParam?

that is download with the following command, why it fails to download that file? wget http://download.oracle.com/otn-pub/java/jdk/6u35-b10/jdk-6u35-linux-i586.bin the following command works, but ...
1
vote
1answer
100 views

Serve mirrored (static) web-page with original headers

I have a dynamic webpage which I want to create a "frozen" copy of. Typically I would do something like wget -m http://example.com, and then put the files in the document root of the web-server. ...
1
vote
1answer
241 views

Accessing request headers in a Squid redirector

I have a redirector enabled in my Squid config file as follows: url_rewrite_program /etc/squid/redirector.php I need to access the original HTTP request headers from within the redirector. I'm not ...
2
votes
1answer
531 views

HTTP GET get HTTP/1.1 0 response code

Occasionally GET requests to my IIS7 server get a response code of HTTP/1.1 0 I've been trying to find some information on this, but so far I'm coming up empty. I've only seen this sort of behavior ...
1
vote
1answer
401 views

Sending HTTP headers by webserver or PHP?

It is equally possible to send HTTP headers by webserver or script. I use PHP on Nginx. Is there any different to send HTTP headers (such as Cache-Control) by nginx or PHP? Is it faster to send ...
0
votes
1answer
375 views

Is html or php header needed for gzip?

I use gzip module of nginx to compress documents. When gzip is enabled nginx will automatically send content-ending of gzip with HTTP headers, right? Without adding any PHP header header() or HTML ...
1
vote
1answer
83 views

Strange stuff into Accept-Language header starting with x-ns

We are getting this kind of HTTP header: Accept-Language: fr-CH,x-ns1Ci7OslejNxN,x-ns2af6MxcVGQb2 Can anyone help me knowing where does it come from. It's just by curiosity that I'm asking this. ...
3
votes
0answers
498 views

How to log effective outgoing HTTP requests made by Squid, with headers after adaptation?

I use Squid to modify some HTTP headers sent by clients. For testing purposes, I want to completely delete the 'User-Agent' header. Here is my config : request_header_access User-Agent deny all ...
1
vote
2answers
5k views

Using curl to request URL that redirects to relative URL with anchor tag

I'm using curl to request a URL that redirects to a different URL using a Location: line like: Location:/path/to/resource#name As I understand it, that line in the redirect response is invalid per ...
2
votes
2answers
346 views

What sort of magic is my ISP doing?

While trying to setup OpenDNS, and failing to make website filtering actually work, I realized my ISP is doing something nefarious with all HTTP requests. To make a long story short, if there's a ...
2
votes
1answer
635 views

Using curl to make a HEAD request with a hard timeout

I'd like to use curl to send a HTTP HEAD request to a URL to verify that it is working correctly (server is up and sends a successful response). At the end, I need the final HTTP response code ...
3
votes
4answers
413 views

Static file with HTTP headers?

Is it possible to save a static html file with built in http headers ? So that putting it on any server will work including the http headers? If so how?
4
votes
2answers
226 views

Obfuscating the server field of an HTTP response header

I'm new to administering a server, and I'm wondering if there is any value in obfuscating the server field for HTTP response headers I'm sending out. Would this prevent hackers from determining which ...
1
vote
1answer
116 views

Meteor server unicode channel problem

When trying to subscribe to a channel named "public" with Meteor, a specialised web server for real-time push using COMET, I get the desired response: <script>ch("public",0)</script> ...
0
votes
1answer
520 views

WSDL server HTTP headers

I am sending request to WSDL server, and I have some funny results. In about 9 of 10 cases I got error from server, however in 1 of 10 I got successful response. Headers from successful response: ...
0
votes
1answer
392 views

In WireShark, what exactly is X-FCCKV2?

When I filtered HTTP traffic in Wireshark I bumped into a X-FCCKV2 HTTP header in the collected info under the Hypertext Transfer Protocol. I've researched it on Google but found nothing. What does ...
0
votes
1answer
345 views

Cannot remove server in response headers (Amazon AWS)

I cannot remove the "Server" header from the response headers. I am using Amazon EC2. I have added this in Apache config: ServerSignature Off Header unset Server RequestHeader unset Server It does ...
0
votes
2answers
810 views

http headers necessary ensure cloudfront distributed files don't get browser cached

I have a Rails-generated JS file that I want to distribute via CloudFront (using my Rails app on EC2 as the origin server). Does anyone know which headers I should use in the response for my JS file ...
1
vote
2answers
1k views

nginx status code 200 and 304

I'm using nginx + passenger. I'm trying to understand the nginx response 200 and 304. What does this both means? Sometimes, it responses back in 304 and others only 200. Reading the YUI blog, it seems ...
0
votes
2answers
386 views

If a server returns Cache-Control=public with no Max-Age or Expires, can a proxy cache it forever?

If a server returns Cache-Control=public with no Max-Age or Expires, can a proxy server cache it forever? Do proxies or the spec have a built-in default for these values? Is it always wrong for a ...
2
votes
1answer
1k views

How to remove response header in lighttpd configuration

There is mod_setenv for adding: setenv.add-response-header = ( "Header" => "value" ) But I can't find anything to remove response headers. I have to be sure, that my content is not cached by ...
1
vote
0answers
429 views

Apache HTTP: Conditionally Set the Last-Modified header

I want to set the Last-Modified date with one of these values: If the request header has the If-Modified-Since value, use this value Else use current date How can I configure this in apache's ...
0
votes
1answer
613 views

Way Around Empty HTTP_REFERRER From 301 Redirect?

I have a client who is in need of determining the traffic statistics from a large number of "tinyurl" shortened URLs, that all redirect to his site. The services that he's used include TinyURL, ...
0
votes
2answers
353 views

How can I know that an HTTP response is a response to HEAD request?

Let's say I see an HTTP response with its header. How do I know if it is a response to a HEAD request? RFC 2616 states that if 200 OK is the status of the response, it should contain a message body ...
0
votes
1answer
2k views

What is a CCM_POST HTTP Request?

I keep getting error messages like these on a server running an installation of an embedded Mongoose webserver [1280931978] [error] [client 66.65.74.105] CCM_POST /ccm_system/request: Error 400: Bad ...
2
votes
4answers
3k views

How to check for the existence of a response header in Nginx rules?

Setting up the rewriting rules for the request proved to be quite easy in Nginx. For the response, not so much (at least, not for me). I want to strip the Content-Type header from the response if the ...
10
votes
2answers
10k views

What is the mandatory information a HTTP Request Header must contain?

What is the mandatory information a HTTP Request Header must contain ?
0
votes
1answer
1k views

retrieve file size from HTTP headers without downloading the file with CURL (no HEAD)

What i want to do is knowa file size and not download it. I've tried it with HEAD but the server doesn't respond curl_setopt($curl, CURLOPT_NOBODY, true); if i quit this , it will , but it will ...
0
votes
2answers
340 views

Why isn't this HTTP response cached?

Below are the request and response headers for a page in my web application: Request Headers: GET http://my-server/myapp/mypage.aspx?myid=123 HTTP/1.1 Accept: */* Accept-Language: en-US User-Agent: ...
0
votes
1answer
224 views

Do all web caches understand the “Cache-Control” HTTP header?

I'd like to avoid the "Expires" header, and use "Cache-Control" only - or maybe the other way around. The headers will account for a significant percentage of my traffic, so I'd prefer not to "use ...
1
vote
1answer
2k views

How to disable HTTP options on Sun servers

Using BURP to send a OPTIONS * HTTP/1.0 request to Sun Web Server 7.0 returns: HTTP/1.1 200 OK Server: Sun-Java-System-Web-Server/7.0 Date: Wed, 03 Feb 2010 01:05:14 GMT Allow: HEAD, GET, PUT, ...
3
votes
2answers
2k views

Set Apache HTTP header except for specified URL

I'm using Apache 2.2 and want to set the X-Frame-Options header to "deny" across most of the site. I can turn it on unconditionally using mod_headers. However, there is one CGI scripts that returns ...
1
vote
2answers
1k views

HTTP: 204 No Content Header

I just registered a new domain and at the moment it sends a 403. Is the HTTP-Header "204 No Content" a good header for a domain with no content at the moment, because I'm working on the site and the ...
5
votes
2answers
7k views

How to send Content-Disposition headers in apache for files?

I have a directory of text files that I'm serving out with apache 2. Normally when I (or any user) access the files they see them in their browser. I want to 'force'* the web browser to pop up a 'Save ...