2022 Developer Survey is open! Take survey.

Questions tagged [headers]

Probably not the tag you want, please use something more specific like http-headers or smtp-headers.

Filter by
Sorted by
Tagged with
0 votes
0 answers
22 views

"$request_headers" and "set_by_lua_block" not working after updating nginx version

nginx: [emerg] unknown directive "set_by_lua_block" in /etc/nginx/conf.d/example.conf "$request_headers" and "set_by_lua_block" not working after updating nginx version ...
user avatar
0 votes
0 answers
17 views

Which to use in List-Unsubscribe header?

I followed this link to add my unsubscribe email header as below, /^Content-Transfer-Encoding:/i PREPEND List-Unsubscribe: mailto:<sender-email-address>?subject=unsubscribe>" so that the ...
user avatar
0 votes
1 answer
26 views

Strange issue with forwarding auth headers from apache to nginx - Non empty header(se_custid/ein) not found in the request to proceed

On the setup describe below, Looks like apache is not able to forward required headers to nginx or nginx while forwarding initial request is not forwarding full URL but just relative path. The idea ...
user avatar
0 votes
1 answer
431 views

How to access X-Forwarded-For header on HAProxy behind AWS Loadbalancer

On HAProxy instances running on K8S I need to block certain IP addresses manually on HAProxy. Currently I am failing already to log them. Per the AWS docs the loadbalancers set the X-Forwarded-For ...
user avatar
0 votes
0 answers
116 views

Email headers: Source IP in x-source-ip but not in "Received" hops

I'm investigating an email and in its headers all the hops (Received entries) are private (10.X.X.X) addresses. Initially I thought that this simply meant that the email originated from the same mail-...
user avatar
0 votes
2 answers
1k views

How to add http host header in URL?

I have web app deployed in K8 in aws & configured LoadBalancer to call the same from internet. In the Postman I call like , GET https://myteams.myorg.net/config Headers: Host doom.myteams.myorg....
user avatar
  • 1
0 votes
1 answer
35 views

Dovecot sieve concatenate heqders

Setup postfix forwards all mails to an archive@domain user via always_bcc, postfix saves all the RCPT TO in X-Envelope-To headers to perserve the bcc recipients, postfix deletes X-Envelope-To for ...
user avatar
0 votes
1 answer
65 views

Multipart text/html email from Invision Community not parsing correctly [closed]

First of all, yes I have contacted Invision Community support. Yes, I am a paying user with an active license. We went back and forth for several hours and all they have to say is there's nothing ...
user avatar
  • 11
0 votes
0 answers
48 views

multiple Header Strict-Transport-Security

i just wanted to know if anyone knows how i can see where is sets the value of the header Strict-Transport-Security in my browser. If I go to a url that contains 2 header (1 defined by a haproxy, the ...
user avatar
  • 1
1 vote
1 answer
1k views

Linux header 4.9.0-11-amd64 is missing in debian

I am a software developer and have only a basic understanding about Linux systems. We are in a migration phase from GCP to AWS and found that the Linux headers are missing while installing Cloud ...
user avatar
1 vote
0 answers
175 views

Apache: Setting response headers based on the existence of multiple response headers

We are attempting to enforce a set of non-cache headers in cases where a reverse proxy does not return any cache headers, in an effort to allow independent backend developers to set headers as they ...
user avatar
0 votes
1 answer
352 views

Postfix header_check regex with if conditional not matching - change sender address when recipient domain matches

I have a header_check that should match when the RECIPIENT address is domain.com and if it matches, then it changes the SENDER address to systems@service.domain.com Scratching my head a little on this....
user avatar
  • 13
0 votes
0 answers
336 views

Compile ModSecurity 3.3 with YAJL

anyone could help? I'm stucked on this. I already compiled ModSecurity 3.3 on this machine (followed these instructions). Now I'm trying to compile with YAJL (Yet Another JSON Library) to be able to ...
user avatar
  • 1
1 vote
0 answers
272 views

Apache2 - Header directives are not working

I would like to enhance the security of my server, so I'm following a guide regarding server security. I'm new to the subject, therefore there are many things I struggle to understand and there is ...
user avatar
  • 113
0 votes
0 answers
326 views

Specify header set depending on the HTTP referer

I am working on two separete ReactJS project which are both making use of the PHP API. Both react project are running from the dev server on port 3000 and one on 3001. Because the ReactJS on these ...
user avatar
  • 258
0 votes
0 answers
1k views

Why doesn't nginx proxy_hide_headers directive work in this case?

I have an nginx server block like this, and I am trying to use the proxy_hide_header directive to hide the Content-Security-Policy response header from the proxied server because I am not running an ...
user avatar
1 vote
1 answer
691 views

Removing one cookie in proxy_pass of nginx

I'm trying to proxy_pass the whole request coming to my nginx to certain base URL to another upstream server removing server cookie. All other cookies, HTTP headers, the URL itself should be kept as ...
user avatar
  • 49
1 vote
1 answer
4k views

setup SameSite=none value in Nginx webserver

I need to setup SameSite=none value in Nginx webserver In case of using Nginx as main webserver and non reverse proxy will the below configuration work? Inside server block location { ...
user avatar
  • 11
0 votes
1 answer
2k views

Alter Nginx reverse proxy cache header from Public to Private

I have an Nginx cache server getting content from an origin server, the origin server sets Cache-Control to Public so my Nginx cache server can cache the content and make less requests to origin. But ...
user avatar
  • 977
1 vote
1 answer
525 views

set header in .htaccess not working if REQUEST_URI contains a word

I need to set some headers if REQUEST_URI contains the "compile" word. My uri is: http://myurl/compile/123456/123456?token=myvalue This is the code in the .htaccess that DOES NOT work: Header ...
user avatar
  • 131
0 votes
1 answer
58 views

Strict-Transport-Security header, specific questions regarding adding to my Apache 2.4 setup

I have several IP-based virtual hosts that I want to add the Strict-Transport-Security header on. I'm using Apache 2.4 custom compiled. Currently I have two <VirtualHost> containers for each ...
user avatar
  • 1,374
0 votes
2 answers
637 views

Block all requests except certain header

I'm using CloudFlare in a shared environment and I'm trying to help block non-CloudFlare users who circumvent to my origin IP. Loading up the web page I see the header server: "cloudflare". So I ...
user avatar
  • 11
-2 votes
1 answer
395 views

I can see HTTP/2 headers with curl. But, if this protocol works with frames and binary numbers: shouldn't these headers be "invisible"?

HTTP/2 has several differences with respect to HTTP/1.1. One of them is the use of frames, binary numbers and compression to optimize the headers. However, when I use "curl -v --http2" against a ...
user avatar
0 votes
0 answers
101 views

Embedding 3 bytes custom data in IPv4 header and then filter by iptables

In my modified OpenVPN server process, as an intermediate node, I'd need to embed my custom 3 bytes data in the header of every IP packet and then in the same machine (after going through tun) filter ...
user avatar
  • 103
1 vote
1 answer
107 views

X-XSS-Protection header not set for the HTML document even that it is enabled in config file

I enabled the X-XSS-Protection header in the web.config file: <httpprotocol> <customheaders> <remove name="X-Powered-By" /> <add name="X-XSS-Protection" ...
user avatar
  • 11
0 votes
0 answers
502 views

My Postfix is rewriting From: header for incoming emails with bad From headers

I received some phishing emails, and the From: header contained ONLY a display name. Like : From: Timmy Tester Postfix then delivered the email, but appended its hostname to FIRST PART of the ...
user avatar
1 vote
1 answer
1k views

Users with Google Proxy IPs

On my website, we log user IPs to ensure we're able to properly moderate and prevent abuse. We are aware of Proxies, such as Opera VPN, Tor, and others. However, I am not aware of Google itself having ...
user avatar
  • 431
0 votes
1 answer
355 views

Exim: how to rewrite a header to remove a string like +1234+?

Hi sorry for a bit of a newbie exim question. For historic reasons we have email going through a smart host addressed to something like: johnsmith+12345+@destinaton.com (where 12345 can be any ...
user avatar
  • 3
0 votes
1 answer
700 views

Why does all my sites inherit the HTTP header from the main site?

I have two sites on the same Nginx server. The site www.example.com contains HTTP headers, but not the analytics.example.com When I go to the analytics.example.com site there is an error message in ...
user avatar
  • 61
4 votes
0 answers
739 views

HTTP Debug method reveals Server header on IIS

Stuck with really weird problem and can't figure out how to handle it. So, I have asp web api application hosted in IIS 10. I use IIS Rewrite module with outbound rule which removes any Server header: ...
user avatar
0 votes
0 answers
2k views

IIS Reverse Proxy: Too Many Redirects and Header Code of 302

[This is a cross post from ESRI's GIS site; I am not getting any luck there] I have not been able to find step by step directions for ArcGIS for Portal and Reverse Proxy which uses IIS as a server. I ...
user avatar
1 vote
1 answer
2k views

Is it possible to fix corrupt LUKS header?

I just accidentally overwrote the LUKS metadata of my volume with a new LVM header. I have copy of the original LUKS header but can't find it. Just in case, I made a dd image of the first 10MB of the ...
user avatar
  • 11
1 vote
0 answers
44 views

Office365 removes mail headers before send

We're sending mails using c# Mail library, we need to send specific headers to track them through external providers. We've tried some months ago and it worked, but now trying again before deploying ...
user avatar
  • 111
0 votes
2 answers
361 views

LiteSpeed ignore PHP header 404 status

After moving my website to a webhost which uses LiteSpeed it seems PHP header is ignored. I have tried these variations: $s = "HTTP/1.1 404 Not Found"; $s = "HTTP/1.0 404 Not Found"; $s = "Status:...
user avatar
  • 95
0 votes
2 answers
3k views

add_header not working in Nginx location

So, I've been trying to figure this out for the past 8 hours, but it seems I'm stuck... I have the following Nginx config file: server_tokens off; upstream php-handler { server unix:/var/run/php5-...
user avatar
  • 269
1 vote
1 answer
3k views

add_header 'Cache-Control' working only without location context

I've installed nginx/1.10.3 (Ubuntu) and changed the original config file so that it is only slightly different at the top of the http context: http { add_header 'Cache-Control' 'no-cache'; and ...
user avatar
  • 11
0 votes
1 answer
59 views

Is it possible to identify a proxy sever (IP & other headers) as the user who originated the request?

Is it possible to identify a proxy sever (IP & other headers) as the user who originated the request? Example 1 (Standard use case): I have a proxy server a.com that proxies all requests to b....
user avatar
4 votes
1 answer
5k views

HAProxy - Add response header based on request host

I have a HAProxy set up to redirect traffic to a few internal servers. What I'm trying to do is to set some response headers, based on the request host. Unfortunately I can't get it to work. Current ...
user avatar
  • 55
0 votes
1 answer
666 views

How do I filter tcpdump results based on a missing header?

My HAProxy adds 'X-Proto: SSL' as a header to requests that are over HTTPS. I'd like to use tcpdump to see the 'Host:' header of all requests that do not have that 'X-Proto: SSL' header. Here's what ...
user avatar
0 votes
1 answer
312 views

Which headers take precedence -- the ones set by Nginx or the application server's?

I'm using Nginx on CentOS with a Rails server. I'm confused about how headers get set. If Nginx sets headers and the applicatino server (Ruby on Rails in this case), which one wins out? I have this ...
user avatar
  • 156
1 vote
2 answers
3k views

Redirect real IP client nginx

How to send to proxied server the real ip of client? My settings are: server { listen 80; server_name foo.example.com; location / { proxy_pass http://someip; proxy_set_header Host $host; ...
user avatar
7 votes
1 answer
10k views

Chrome DevTools - Request Header Size

Is there a way to get the total size (in bytes) of the request header that the browser is sending to the server for each request?
user avatar
  • 171
3 votes
1 answer
4k views

Nginx on CentOS: How can I change the "Server" header?

I'm running Nginx on Centos6. For security reasons I'd like to change/remove the Server HTTP header contained in the response headers. For instance,nginx's default Sever header looks like:I'm ...
user avatar
1 vote
1 answer
2k views

Postfix swallows Bcc header

I use the postfix 2.9.6 and use a milter to read the contents for my application. I am seeing Postfix swallows Bcc: header from the incoming emails and my milter missed just that Bcc header. Is there ...
user avatar
2 votes
0 answers
1k views

Nginx proxy_pass loses headers when using http2

I've encoutered a problem with nginx losing headers to backend when using http2 protocol on nginx(regular http to Wildfly 10 backend). The below config works when taking the http2 parameter away and ...
user avatar
3 votes
1 answer
757 views

Set environment variables from header for Ruby/Rails app hosted in Nginx/Passenger

I installed a server for Redmine, running with Nginx/Passenger. The server also hosts Gitlab and it goes well. I put some kind of SSO plugin for Redmine (which I found and installed) and it needs an ...
user avatar
1 vote
1 answer
163 views

Postfix MTA - Match string in header fields

I'm trying to block some spammer by filtering some fields in the mail header, but it isn't working. The spammer is adding random domains in the headers, but the "user" is always the same, like this: ...
user avatar
1 vote
1 answer
5k views

Keeping Headers During NGINX Rewrite

I am attempting to set up an NGINX proxy to redirect all requests to one of two servers based on the contents of a query string argument. Essentially: https://my.site.com/api/...&server=a ...
user avatar
0 votes
1 answer
639 views

nginx regex with capture bug

I'm trying to use regex capture functions for create an Access-Control-Origin header. So y have two main capture, one for the adress of website ( likehttp://example.com) and another for the port ...
user avatar
  • 290
0 votes
1 answer
1k views

Pros/Cons to disabling HEAD requests with Nginx?

I have a static blog/site and I'm wondering if there are any negative implications of disallowing/disabling HEAD requests within my Nginx conf? For example: would it break the site with certain web ...
user avatar