Questions tagged [headers]

Probably not the tag you want, please use something more specific like http-headers or smtp-headers.

Filter by
Sorted by
Tagged with
0
votes
0answers
8 views

Why doesn't nginx proxy_hide_headers directive work in this case?

I have an nginx server block like this, and I am trying to use the proxy_hide_header directive to hide the Content-Security-Policy response header from the proxied server because I am not running an ...
1
vote
1answer
57 views

Removing one cookie in proxy_pass of nginx

I'm trying to proxy_pass the whole request coming to my nginx to certain base URL to another upstream server removing server cookie. All other cookies, HTTP headers, the URL itself should be kept as ...
0
votes
0answers
96 views

setup SameSite=none value in Nginx webserver

I need to setup SameSite=none value in Nginx webserver In case of using Nginx as main webserver and non reverse proxy will the below configuration work? Inside server block location { ...
0
votes
1answer
1k views

Alter Nginx reverse proxy cache header from Public to Private

I have an Nginx cache server getting content from an origin server, the origin server sets Cache-Control to Public so my Nginx cache server can cache the content and make less requests to origin. But ...
0
votes
0answers
9 views

Postfix add Header if RCPT matches

I want to add the link_unsubscribe Header to some Emails, if the RCPT is for example "mailing_list@example.org". In my database I have a field with "mailing_list" = True for this address. In main....
1
vote
1answer
56 views

set header in .htaccess not working if REQUEST_URI contains a word

I need to set some headers if REQUEST_URI contains the "compile" word. My uri is: http://myurl/compile/123456/123456?token=myvalue This is the code in the .htaccess that DOES NOT work: Header ...
0
votes
0answers
60 views

HTTP-Server with preference for “Transfer-Encoding”-Header?

Im currently trying to setup a little showcase and Proof-of-Concept of a HTTP-Request-Smuggling-attack (https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn) with a Content-...
0
votes
1answer
31 views

Strict-Transport-Security header, specific questions regarding adding to my Apache 2.4 setup

I have several IP-based virtual hosts that I want to add the Strict-Transport-Security header on. I'm using Apache 2.4 custom compiled. Currently I have two <VirtualHost> containers for each ...
0
votes
2answers
479 views

Block all requests except certain header

I'm using CloudFlare in a shared environment and I'm trying to help block non-CloudFlare users who circumvent to my origin IP. Loading up the web page I see the header server: "cloudflare". So I ...
-2
votes
1answer
124 views

I can see HTTP/2 headers with curl. But, if this protocol works with frames and binary numbers: shouldn't these headers be “invisible”?

HTTP/2 has several differences with respect to HTTP/1.1. One of them is the use of frames, binary numbers and compression to optimize the headers. However, when I use "curl -v --http2" against a ...
0
votes
0answers
45 views

Embedding 3 bytes custom data in IPv4 header and then filter by iptables

In my modified OpenVPN server process, as an intermediate node, I'd need to embed my custom 3 bytes data in the header of every IP packet and then in the same machine (after going through tun) filter ...
0
votes
0answers
13 views

set http header conditionally depending on group

I have an application where I have 2 groups and want to differentiate what they allowed to see. Therefore I want to set an http header when a user is in the first group and another one when he is in ...
0
votes
0answers
116 views

Apache httpd setting a custom header prefix

I'm using apache httpd24 to extract the headers from aws cognito and pass it to a JAVA application. AWS is sending me the following headers: username email firstname family_name And my target ...
1
vote
1answer
91 views

X-XSS-Protection header not set for the HTML document even that it is enabled in config file

I enabled the X-XSS-Protection header in the web.config file: <httpprotocol> <customheaders> <remove name="X-Powered-By" /> <add name="X-XSS-Protection" ...
0
votes
0answers
268 views

My Postfix is rewriting From: header for incoming emails with bad From headers

I received some phishing emails, and the From: header contained ONLY a display name. Like : From: Timmy Tester Postfix then delivered the email, but appended its hostname to FIRST PART of the ...
0
votes
1answer
337 views

Users with Google Proxy IPs

On my website, we log user IPs to ensure we're able to properly moderate and prevent abuse. We are aware of Proxies, such as Opera VPN, Tor, and others. However, I am not aware of Google itself ...
0
votes
1answer
125 views

Exim: how to rewrite a header to remove a string like +1234+?

Hi sorry for a bit of a newbie exim question. For historic reasons we have email going through a smart host addressed to something like: johnsmith+12345+@destinaton.com (where 12345 can be any ...
0
votes
1answer
320 views

Why does all my sites inherit the HTTP header from the main site?

I have two sites on the same Nginx server. The site www.example.com contains HTTP headers, but not the analytics.example.com When I go to the analytics.example.com site there is an error message in ...
3
votes
0answers
245 views

HTTP Debug method reveals Server header on IIS

Stuck with really weird problem and can't figure out how to handle it. So, I have asp web api application hosted in IIS 10. I use IIS Rewrite module with outbound rule which removes any Server header: ...
0
votes
0answers
759 views

IIS Reverse Proxy: Too Many Redirects and Header Code of 302

[This is a cross post from ESRI's GIS site; I am not getting any luck there] I have not been able to find step by step directions for ArcGIS for Portal and Reverse Proxy which uses IIS as a server. I ...
0
votes
1answer
813 views

Is it possible to fix corrupt LUKS header?

I just accidentally overwrote the LUKS metadata of my volume with a new LVM header. I have copy of the original LUKS header but can't find it. Just in case, I made a dd image of the first 10MB of the ...
1
vote
0answers
36 views

Office365 removes mail headers before send

We're sending mails using c# Mail library, we need to send specific headers to track them through external providers. We've tried some months ago and it worked, but now trying again before deploying ...
0
votes
2answers
254 views

LiteSpeed ignore PHP header 404 status

After moving my website to a webhost which uses LiteSpeed it seems PHP header is ignored. I have tried these variations: $s = "HTTP/1.1 404 Not Found"; $s = "HTTP/1.0 404 Not Found"; $s = "Status:...
0
votes
2answers
1k views

add_header not working in Nginx location

So, I've been trying to figure this out for the past 8 hours, but it seems I'm stuck... I have the following Nginx config file: server_tokens off; upstream php-handler { server unix:/var/run/php5-...
1
vote
1answer
2k views

add_header 'Cache-Control' working only without location context

I've installed nginx/1.10.3 (Ubuntu) and changed the original config file so that it is only slightly different at the top of the http context: http { add_header 'Cache-Control' 'no-cache'; and ...
0
votes
1answer
43 views

Is it possible to identify a proxy sever (IP & other headers) as the user who originated the request?

Is it possible to identify a proxy sever (IP & other headers) as the user who originated the request? Example 1 (Standard use case): I have a proxy server a.com that proxies all requests to b....
4
votes
1answer
3k views

HAProxy - Add response header based on request host

I have a HAProxy set up to redirect traffic to a few internal servers. What I'm trying to do is to set some response headers, based on the request host. Unfortunately I can't get it to work. Current ...
0
votes
1answer
429 views

How do I filter tcpdump results based on a missing header?

My HAProxy adds 'X-Proto: SSL' as a header to requests that are over HTTPS. I'd like to use tcpdump to see the 'Host:' header of all requests that do not have that 'X-Proto: SSL' header. Here's what ...
0
votes
1answer
150 views

Which headers take precedence — the ones set by Nginx or the application server's?

I'm using Nginx on CentOS with a Rails server. I'm confused about how headers get set. If Nginx sets headers and the applicatino server (Ruby on Rails in this case), which one wins out? I have this ...
1
vote
2answers
2k views

Redirect real IP client nginx

How to send to proxied server the real ip of client? My settings are: server { listen 80; server_name foo.example.com; location / { proxy_pass http://someip; proxy_set_header Host $host; ...
5
votes
1answer
1k views

Chrome DevTools - Request Header Size

Is there a way to get the total size (in bytes) of the request header that the browser is sending to the server for each request?
3
votes
1answer
3k views

Nginx on CentOS: How can I change the “Server” header?

I'm running Nginx on Centos6. For security reasons I'd like to change/remove the Server HTTP header contained in the response headers. For instance,nginx's default Sever header looks like:I'm ...
1
vote
1answer
1k views

Postfix swallows Bcc header

I use the postfix 2.9.6 and use a milter to read the contents for my application. I am seeing Postfix swallows Bcc: header from the incoming emails and my milter missed just that Bcc header. Is there ...
1
vote
0answers
742 views

Nginx proxy_pass loses headers when using http2

I've encoutered a problem with nginx losing headers to backend when using http2 protocol on nginx(regular http to Wildfly 10 backend). The below config works when taking the http2 parameter away and ...
3
votes
1answer
538 views

Set environment variables from header for Ruby/Rails app hosted in Nginx/Passenger

I installed a server for Redmine, running with Nginx/Passenger. The server also hosts Gitlab and it goes well. I put some kind of SSO plugin for Redmine (which I found and installed) and it needs an ...
1
vote
1answer
124 views

Postfix MTA - Match string in header fields

I'm trying to block some spammer by filtering some fields in the mail header, but it isn't working. The spammer is adding random domains in the headers, but the "user" is always the same, like this: ...
1
vote
1answer
3k views

Keeping Headers During NGINX Rewrite

I am attempting to set up an NGINX proxy to redirect all requests to one of two servers based on the contents of a query string argument. Essentially: https://my.site.com/api/...&server=a ...
0
votes
1answer
455 views

nginx regex with capture bug

I'm trying to use regex capture functions for create an Access-Control-Origin header. So y have two main capture, one for the adress of website ( likehttp://example.com) and another for the port ...
0
votes
1answer
652 views

Pros/Cons to disabling HEAD requests with Nginx?

I have a static blog/site and I'm wondering if there are any negative implications of disallowing/disabling HEAD requests within my Nginx conf? For example: would it break the site with certain web ...
3
votes
1answer
589 views

Need help determining origin of spam email

As a quick background we have spam that is being sent out with our domain name. As a result we have added SPF record to our domain DNS, now obviously this will assist in making sure this spam is not ...
1
vote
1answer
687 views

Ignoring forwarder IP in syslog-ng

We are getting syslog-ng feeds from a forwarder that we don't control. The issue is that they are using an older version (RHEL 6), and while they have keep_hostnames set to 'yes' (chain_hostnames to '...
3
votes
1answer
2k views

Add proxy headers in named location using nested location regex

I'm trying to setup a WebSocket endpoint on my Rails API using Nginx and Puma. What I have (working but ugly) The following Nginx configuration works fine, however I feel like I could use something ...
0
votes
1answer
751 views

How to avoid duplicated configuration in Nginx Location Config

Take this Nginx location config as example: location ~* \.(gif|jpg|jpeg|swf|css)$ { add_header Cache-Control "max-age=259200, public"; } location ^~ /abc/ { try_files $uri /abc/generic.png; } ...
1
vote
1answer
937 views

Is https preventing a proxy from adding x-forward-for header?

I'm trying to troubleshoot an issue for a user of my service https://jsonip.com. Last week I enabled forcing 301 redirects for all http to https connections. The user I'm trying to help now was ...
5
votes
1answer
28k views

proxy_set_header not working

/etc/nginx/sites-available/default server { listen 80 default_server; listen [::]:80 default_server ipv6only=on; root /usr/share/nginx/html; index index.html index.htm; # Make ...
1
vote
0answers
824 views

Haproxy Nginx : How not to forward the local port?

I have haproxy which listening on ports 80 and 443 and behind Nginx listening locally on ports 8000, 8001, 8002 etc... By default, all works fine but when an application web made a redirect 301, it ...
1
vote
1answer
293 views

LUKS Header - 30kB mysteriously missing

I have a disk containing (only) a LUKS encrypted volume. That was created on a bare drive with no partition table using cryptsetup v.1.6.1. When unlocked, I can check the size of the decrypted ...
2
votes
0answers
156 views

Use different client IPs with mod_rewrite and mod_remoteip

I have a reverse proxy that my site points to to help with DDoS protection. I have mod_rewrite set to use a specific header provided by the reverse proxy in order to pull the actual client IPs instead ...
4
votes
1answer
4k views

How to override “Content-Type” header with PHP script on Nginx

I have some php script which returns jpeg image(1x1 pixel) with content type "image/jpeg": // return image $image_name = 'img/pixel.jpg'; $image = fopen($image_name, 'rb'); header('Content-Length: ' ....
2
votes
3answers
419 views

Is TCP header the same as TCP segment?

So, is a TCP header actually the same thing as a TCP segment? I was reading this page, where it reads near the end that: Even though it might seem they are, in most cases, when referring to the ...