Questions tagged [headers]

Probably not the tag you want, please use something more specific like http-headers or smtp-headers.

Filter by
Sorted by
Tagged with
0 votes
2 answers
73 views

apache2 can not set REMOTE_ADDR or any other var as header

i trying to setup apache as a reverse proxy and i need to add e.g. the REMOTE_ADDR and some other values as an header (required by the backend), for some reason always "null" is set. ...
sususo's user avatar
  • 1
0 votes
0 answers
45 views

Ubuntu Apache2 mod headers - not adding

I have an ubunutu server with apache2 server and I need to add a custom header to every request. This seems very straightforward, but it's not adding the header. I have enabled the module headers with ...
Hugo Delsing's user avatar
0 votes
0 answers
104 views

comparing __FILE__ with $_SERVER['SCRIPT_FILENAME'] before sending header

I am new to PHP, I saw a code which has the following lines, what is the code trying to de here. if (basename(__FILE__) === basename($_SERVER['SCRIPT_FILENAME'])) { header("Location: https://...
Abdulrahman Hocaoglu's user avatar
2 votes
0 answers
379 views

Why is CloudFront failing to pass a header from the origin to the client?

I have CloudFront configured with an API Gateway origin. In the application accessed via API Gateway, my application responds to a particular request with a Content-Disposition header so that the data ...
Bill's user avatar
  • 201
0 votes
0 answers
21 views

Remove 'Server' header in IIS 10 [duplicate]

Our compliance department wants us to remove the 'Server' header when someone hits our server via IP address. I don't know how to accomplish that, can someone help? To be clear, I know how to do this ...
Jose's user avatar
  • 167
0 votes
1 answer
210 views

Multiple issues with Nginx configuration

I am quite new to Nginx and I just can't make it work. I have a web app hosted in Azure. It's a WordPress website. Here is the Nginx file: server { #proxy_cache cache; #proxy_cache_valid ...
pictoru's user avatar
  • 103
0 votes
1 answer
437 views

Postfix header_checks with multi-line headers and capture group

We have a header_checks regexp passed to the "cleanup" process, but it's not processing the header as a single header if it's on multiple lines. header_check (pass value of header to FILTER):...
reactive-core's user avatar
1 vote
0 answers
336 views

Configuring postfix to use SendGrid SMTP relay with fixed FROM address but need to append REPLY-TO of original sender

I have been trying to resolve for a couple of months using multiple different configurations. The local delivery to a Dovecot mailbox ([email protected]) keeps the original sender (sender@gmail....
kcfez's user avatar
  • 11
0 votes
1 answer
203 views

From "Display Name" not working - Postfix/Dovecot

Working with Dovecot, Postfix and MySQL to send email from my web server (at [email protected]) but what shows up in the inbox is example instead of the display name I put into the email client (...
liminalFrog's user avatar
0 votes
1 answer
1k views

Strange issue with forwarding auth headers from apache to nginx - Non empty header(se_custid/ein) not found in the request to proceed

On the setup describe below, Looks like apache is not able to forward required headers to nginx or nginx while forwarding initial request is not forwarding full URL but just relative path. The idea ...
Dhanraj B. Sheth's user avatar
0 votes
1 answer
3k views

How to access X-Forwarded-For header on HAProxy behind AWS Loadbalancer

On HAProxy instances running on K8S I need to block certain IP addresses manually on HAProxy. Currently I am failing already to log them. Per the AWS docs the loadbalancers set the X-Forwarded-For ...
Jason Nerer's user avatar
0 votes
2 answers
17k views

How to add http host header in URL?

I have web app deployed in K8 in aws & configured LoadBalancer to call the same from internet. In the Postman I call like , GET https://myteams.myorg.net/config Headers: Host doom.myteams.myorg....
k8dev's user avatar
  • 1
0 votes
1 answer
120 views

Dovecot sieve concatenate heqders

Setup postfix forwards all mails to an archive@domain user via always_bcc, postfix saves all the RCPT TO in X-Envelope-To headers to perserve the bcc recipients, postfix deletes X-Envelope-To for ...
user3450564's user avatar
0 votes
1 answer
157 views

Multipart text/html email from Invision Community not parsing correctly [closed]

First of all, yes I have contacted Invision Community support. Yes, I am a paying user with an active license. We went back and forth for several hours and all they have to say is there's nothing ...
Krydos's user avatar
  • 11
1 vote
1 answer
2k views

Linux header 4.9.0-11-amd64 is missing in debian

I am a software developer and have only a basic understanding about Linux systems. We are in a migration phase from GCP to AWS and found that the Linux headers are missing while installing Cloud ...
Tismon Varghese's user avatar
1 vote
0 answers
397 views

Apache: Setting response headers based on the existence of multiple response headers

We are attempting to enforce a set of non-cache headers in cases where a reverse proxy does not return any cache headers, in an effort to allow independent backend developers to set headers as they ...
Johan Karlberg's user avatar
0 votes
1 answer
2k views

Postfix header_check regex with if conditional not matching - change sender address when recipient domain matches

I have a header_check that should match when the RECIPIENT address is domain.com and if it matches, then it changes the SENDER address to [email protected] Scratching my head a little on this....
HarryT's user avatar
  • 23
0 votes
0 answers
686 views

Compile ModSecurity 3.3 with YAJL

anyone could help? I'm stucked on this. I already compiled ModSecurity 3.3 on this machine (followed these instructions). Now I'm trying to compile with YAJL (Yet Another JSON Library) to be able to ...
Filipe's user avatar
  • 1
1 vote
0 answers
650 views

Apache2 - Header directives are not working

I would like to enhance the security of my server, so I'm following a guide regarding server security. I'm new to the subject, therefore there are many things I struggle to understand and there is ...
DamiToma's user avatar
  • 113
0 votes
0 answers
1k views

Specify header set depending on the HTTP referer

I am working on two separete ReactJS project which are both making use of the PHP API. Both react project are running from the dev server on port 3000 and one on 3001. Because the ReactJS on these ...
Boardy's user avatar
  • 268
1 vote
0 answers
3k views

Why doesn't nginx proxy_hide_headers directive work in this case?

I have an nginx server block like this, and I am trying to use the proxy_hide_header directive to hide the Content-Security-Policy response header from the proxied server because I am not running an ...
jonseymour's user avatar
1 vote
1 answer
4k views

Removing one cookie in proxy_pass of nginx

I'm trying to proxy_pass the whole request coming to my nginx to certain base URL to another upstream server removing server cookie. All other cookies, HTTP headers, the URL itself should be kept as ...
Alexey's user avatar
  • 59
1 vote
1 answer
7k views

setup SameSite=none value in Nginx webserver

I need to setup SameSite=none value in Nginx webserver In case of using Nginx as main webserver and non reverse proxy will the below configuration work? Inside server block location { ...
Georg's user avatar
  • 11
0 votes
1 answer
4k views

Alter Nginx reverse proxy cache header from Public to Private

I have an Nginx cache server getting content from an origin server, the origin server sets Cache-Control to Public so my Nginx cache server can cache the content and make less requests to origin. But ...
adrianTNT's user avatar
  • 1,149
1 vote
1 answer
1k views

set header in .htaccess not working if REQUEST_URI contains a word

I need to set some headers if REQUEST_URI contains the "compile" word. My uri is: http://myurl/compile/123456/123456?token=myvalue This is the code in the .htaccess that DOES NOT work: Header ...
Giacomo M's user avatar
  • 131
0 votes
1 answer
203 views

Strict-Transport-Security header, specific questions regarding adding to my Apache 2.4 setup

I have several IP-based virtual hosts that I want to add the Strict-Transport-Security header on. I'm using Apache 2.4 custom compiled. Currently I have two <VirtualHost> containers for each ...
Jeff's user avatar
  • 1,426
0 votes
2 answers
952 views

Block all requests except certain header

I'm using CloudFlare in a shared environment and I'm trying to help block non-CloudFlare users who circumvent to my origin IP. Loading up the web page I see the header server: "cloudflare". So I ...
Aaron's user avatar
  • 11
-1 votes
1 answer
664 views

I can see HTTP/2 headers with curl. But, if this protocol works with frames and binary numbers: shouldn't these headers be "invisible"?

HTTP/2 has several differences with respect to HTTP/1.1. One of them is the use of frames, binary numbers and compression to optimize the headers. However, when I use "curl -v --http2" against a ...
john smith's user avatar
0 votes
0 answers
211 views

Embedding 3 bytes custom data in IPv4 header and then filter by iptables

In my modified OpenVPN server process, as an intermediate node, I'd need to embed my custom 3 bytes data in the header of every IP packet and then in the same machine (after going through tun) filter ...
frogatto's user avatar
  • 103
1 vote
1 answer
190 views

X-XSS-Protection header not set for the HTML document even that it is enabled in config file

I enabled the X-XSS-Protection header in the web.config file: <httpprotocol> <customheaders> <remove name="X-Powered-By" /> <add name="X-XSS-Protection" ...
NunoF's user avatar
  • 11
0 votes
0 answers
753 views

My Postfix is rewriting From: header for incoming emails with bad From headers

I received some phishing emails, and the From: header contained ONLY a display name. Like : From: Timmy Tester Postfix then delivered the email, but appended its hostname to FIRST PART of the ...
user145837's user avatar
1 vote
1 answer
2k views

Users with Google Proxy IPs

On my website, we log user IPs to ensure we're able to properly moderate and prevent abuse. We are aware of Proxies, such as Opera VPN, Tor, and others. However, I am not aware of Google itself having ...
Nuno's user avatar
  • 633
0 votes
1 answer
692 views

Exim: how to rewrite a header to remove a string like +1234+?

Hi sorry for a bit of a newbie exim question. For historic reasons we have email going through a smart host addressed to something like: [email protected] (where 12345 can be any ...
Keith's user avatar
  • 3
0 votes
1 answer
941 views

Why does all my sites inherit the HTTP header from the main site?

I have two sites on the same Nginx server. The site www.example.com contains HTTP headers, but not the analytics.example.com When I go to the analytics.example.com site there is an error message in ...
ML19's user avatar
  • 101
4 votes
1 answer
1k views

HTTP Debug method reveals Server header on IIS

Stuck with really weird problem and can't figure out how to handle it. So, I have asp web api application hosted in IIS 10. I use IIS Rewrite module with outbound rule which removes any Server header: ...
Igor V Savchenko's user avatar
0 votes
0 answers
2k views

IIS Reverse Proxy: Too Many Redirects and Header Code of 302

[This is a cross post from ESRI's GIS site; I am not getting any luck there] I have not been able to find step by step directions for ArcGIS for Portal and Reverse Proxy which uses IIS as a server. I ...
IrfanClemson's user avatar
1 vote
2 answers
3k views

Is it possible to fix corrupt LUKS header?

I just accidentally overwrote the LUKS metadata of my volume with a new LVM header. I have copy of the original LUKS header but can't find it. Just in case, I made a dd image of the first 10MB of the ...
zonko's user avatar
  • 11
1 vote
0 answers
54 views

Office365 removes mail headers before send

We're sending mails using c# Mail library, we need to send specific headers to track them through external providers. We've tried some months ago and it worked, but now trying again before deploying ...
Marc's user avatar
  • 111
0 votes
2 answers
599 views

LiteSpeed ignore PHP header 404 status

After moving my website to a webhost which uses LiteSpeed it seems PHP header is ignored. I have tried these variations: $s = "HTTP/1.1 404 Not Found"; $s = "HTTP/1.0 404 Not Found"; $s = "Status:...
Tom's user avatar
  • 97
0 votes
2 answers
4k views

add_header not working in Nginx location

So, I've been trying to figure this out for the past 8 hours, but it seems I'm stuck... I have the following Nginx config file: server_tokens off; upstream php-handler { server unix:/var/run/php5-...
Tony's user avatar
  • 268
1 vote
1 answer
4k views

add_header 'Cache-Control' working only without location context

I've installed nginx/1.10.3 (Ubuntu) and changed the original config file so that it is only slightly different at the top of the http context: http { add_header 'Cache-Control' 'no-cache'; and ...
sorry's user avatar
  • 11
0 votes
1 answer
154 views

Is it possible to identify a proxy sever (IP & other headers) as the user who originated the request?

Is it possible to identify a proxy sever (IP & other headers) as the user who originated the request? Example 1 (Standard use case): I have a proxy server a.com that proxies all requests to b....
Eric Uldall's user avatar
4 votes
1 answer
7k views

HAProxy - Add response header based on request host

I have a HAProxy set up to redirect traffic to a few internal servers. What I'm trying to do is to set some response headers, based on the request host. Unfortunately I can't get it to work. Current ...
elmo's user avatar
  • 55
0 votes
1 answer
861 views

How do I filter tcpdump results based on a missing header?

My HAProxy adds 'X-Proto: SSL' as a header to requests that are over HTTPS. I'd like to use tcpdump to see the 'Host:' header of all requests that do not have that 'X-Proto: SSL' header. Here's what ...
nowthatsamatt's user avatar
1 vote
1 answer
610 views

Which headers take precedence -- the ones set by Nginx or the application server's?

I'm using Nginx on CentOS with a Rails server. I'm confused about how headers get set. If Nginx sets headers and the applicatino server (Ruby on Rails in this case), which one wins out? I have this ...
Dave's user avatar
  • 224
1 vote
2 answers
5k views

Redirect real IP client nginx

How to send to proxied server the real ip of client? My settings are: server { listen 80; server_name foo.example.com; location / { proxy_pass http://someip; proxy_set_header Host $host; ...
Meiram Chuzhenbayev's user avatar
9 votes
1 answer
24k views

Chrome DevTools - Request Header Size

Is there a way to get the total size (in bytes) of the request header that the browser is sending to the server for each request?
stepanian's user avatar
  • 191
3 votes
1 answer
5k views

Nginx on CentOS: How can I change the "Server" header?

I'm running Nginx on Centos6. For security reasons I'd like to change/remove the Server HTTP header contained in the response headers. For instance,nginx's default Sever header looks like:I'm ...
joejoe12's user avatar
1 vote
2 answers
3k views

Postfix swallows Bcc header

I use the postfix 2.9.6 and use a milter to read the contents for my application. I am seeing Postfix swallows Bcc: header from the incoming emails and my milter missed just that Bcc header. Is there ...
Sathish Kumar's user avatar
2 votes
0 answers
1k views

Nginx proxy_pass loses headers when using http2

I've encoutered a problem with nginx losing headers to backend when using http2 protocol on nginx(regular http to Wildfly 10 backend). The below config works when taking the http2 parameter away and ...
Henri Kotka's user avatar