Questions tagged [headers]

Probably not the tag you want, please use something more specific like http-headers or smtp-headers.

Filter by
Sorted by
Tagged with
0
votes
1answer
24 views

Dovecot sieve concatenate heqders

Setup postfix forwards all mails to an archive@domain user via always_bcc, postfix saves all the RCPT TO in X-Envelope-To headers to perserve the bcc recipients, postfix deletes X-Envelope-To for ...
0
votes
1answer
49 views

Multipart text/html email from Invision Community not parsing correctly [closed]

First of all, yes I have contacted Invision Community support. Yes, I am a paying user with an active license. We went back and forth for several hours and all they have to say is there's nothing ...
0
votes
0answers
15 views

multiple Header Strict-Transport-Security

i just wanted to know if anyone knows how i can see where is sets the value of the header Strict-Transport-Security in my browser. If I go to a url that contains 2 header (1 defined by a haproxy, the ...
1
vote
1answer
603 views

Linux header 4.9.0-11-amd64 is missing in debian

I am a software developer and have only a basic understanding about Linux systems. We are in a migration phase from GCP to AWS and found that the Linux headers are missing while installing Cloud ...
1
vote
0answers
68 views

Apache: Setting response headers based on the existence of multiple response headers

We are attempting to enforce a set of non-cache headers in cases where a reverse proxy does not return any cache headers, in an effort to allow independent backend developers to set headers as they ...
0
votes
1answer
87 views

Postfix header_check regex with if conditional not matching - change sender address when recipient domain matches

I have a header_check that should match when the RECIPIENT address is domain.com and if it matches, then it changes the SENDER address to systems@service.domain.com Scratching my head a little on this....
0
votes
0answers
240 views

Cloudfront does not pass Host header properly

With my default cloudfront settings (which is basically only setting origin domain name, no other changes made), when accessing origin domain through cloudfront, I can view the headers and the Host ...
0
votes
0answers
204 views

Compile ModSecurity 3.3 with YAJL

anyone could help? I'm stucked on this. I already compiled ModSecurity 3.3 on this machine (followed these instructions). Now I'm trying to compile with YAJL (Yet Another JSON Library) to be able to ...
1
vote
0answers
133 views

Apache2 - Header directives are not working

I would like to enhance the security of my server, so I'm following a guide regarding server security. I'm new to the subject, therefore there are many things I struggle to understand and there is ...
0
votes
0answers
190 views

Specify header set depending on the HTTP referer

I am working on two separete ReactJS project which are both making use of the PHP API. Both react project are running from the dev server on port 3000 and one on 3001. Because the ReactJS on these ...
0
votes
0answers
888 views

Why doesn't nginx proxy_hide_headers directive work in this case?

I have an nginx server block like this, and I am trying to use the proxy_hide_header directive to hide the Content-Security-Policy response header from the proxied server because I am not running an ...
1
vote
1answer
176 views

Removing one cookie in proxy_pass of nginx

I'm trying to proxy_pass the whole request coming to my nginx to certain base URL to another upstream server removing server cookie. All other cookies, HTTP headers, the URL itself should be kept as ...
1
vote
1answer
3k views

setup SameSite=none value in Nginx webserver

I need to setup SameSite=none value in Nginx webserver In case of using Nginx as main webserver and non reverse proxy will the below configuration work? Inside server block location { ...
0
votes
1answer
2k views

Alter Nginx reverse proxy cache header from Public to Private

I have an Nginx cache server getting content from an origin server, the origin server sets Cache-Control to Public so my Nginx cache server can cache the content and make less requests to origin. But ...
1
vote
1answer
328 views

set header in .htaccess not working if REQUEST_URI contains a word

I need to set some headers if REQUEST_URI contains the "compile" word. My uri is: http://myurl/compile/123456/123456?token=myvalue This is the code in the .htaccess that DOES NOT work: Header ...
0
votes
1answer
44 views

Strict-Transport-Security header, specific questions regarding adding to my Apache 2.4 setup

I have several IP-based virtual hosts that I want to add the Strict-Transport-Security header on. I'm using Apache 2.4 custom compiled. Currently I have two <VirtualHost> containers for each ...
0
votes
2answers
542 views

Block all requests except certain header

I'm using CloudFlare in a shared environment and I'm trying to help block non-CloudFlare users who circumvent to my origin IP. Loading up the web page I see the header server: "cloudflare". So I ...
-2
votes
1answer
294 views

I can see HTTP/2 headers with curl. But, if this protocol works with frames and binary numbers: shouldn't these headers be "invisible"?

HTTP/2 has several differences with respect to HTTP/1.1. One of them is the use of frames, binary numbers and compression to optimize the headers. However, when I use "curl -v --http2" against a ...
0
votes
0answers
81 views

Embedding 3 bytes custom data in IPv4 header and then filter by iptables

In my modified OpenVPN server process, as an intermediate node, I'd need to embed my custom 3 bytes data in the header of every IP packet and then in the same machine (after going through tun) filter ...
1
vote
1answer
101 views

X-XSS-Protection header not set for the HTML document even that it is enabled in config file

I enabled the X-XSS-Protection header in the web.config file: <httpprotocol> <customheaders> <remove name="X-Powered-By" /> <add name="X-XSS-Protection" ...
0
votes
0answers
454 views

My Postfix is rewriting From: header for incoming emails with bad From headers

I received some phishing emails, and the From: header contained ONLY a display name. Like : From: Timmy Tester Postfix then delivered the email, but appended its hostname to FIRST PART of the ...
1
vote
1answer
842 views

Users with Google Proxy IPs

On my website, we log user IPs to ensure we're able to properly moderate and prevent abuse. We are aware of Proxies, such as Opera VPN, Tor, and others. However, I am not aware of Google itself ...
0
votes
1answer
265 views

Exim: how to rewrite a header to remove a string like +1234+?

Hi sorry for a bit of a newbie exim question. For historic reasons we have email going through a smart host addressed to something like: johnsmith+12345+@destinaton.com (where 12345 can be any ...
0
votes
1answer
643 views

Why does all my sites inherit the HTTP header from the main site?

I have two sites on the same Nginx server. The site www.example.com contains HTTP headers, but not the analytics.example.com When I go to the analytics.example.com site there is an error message in ...
3
votes
0answers
598 views

HTTP Debug method reveals Server header on IIS

Stuck with really weird problem and can't figure out how to handle it. So, I have asp web api application hosted in IIS 10. I use IIS Rewrite module with outbound rule which removes any Server header: ...
0
votes
0answers
1k views

IIS Reverse Proxy: Too Many Redirects and Header Code of 302

[This is a cross post from ESRI's GIS site; I am not getting any luck there] I have not been able to find step by step directions for ArcGIS for Portal and Reverse Proxy which uses IIS as a server. I ...
1
vote
1answer
2k views

Is it possible to fix corrupt LUKS header?

I just accidentally overwrote the LUKS metadata of my volume with a new LVM header. I have copy of the original LUKS header but can't find it. Just in case, I made a dd image of the first 10MB of the ...
1
vote
0answers
41 views

Office365 removes mail headers before send

We're sending mails using c# Mail library, we need to send specific headers to track them through external providers. We've tried some months ago and it worked, but now trying again before deploying ...
0
votes
2answers
329 views

LiteSpeed ignore PHP header 404 status

After moving my website to a webhost which uses LiteSpeed it seems PHP header is ignored. I have tried these variations: $s = "HTTP/1.1 404 Not Found"; $s = "HTTP/1.0 404 Not Found"; $s = "Status:...
0
votes
2answers
3k views

add_header not working in Nginx location

So, I've been trying to figure this out for the past 8 hours, but it seems I'm stuck... I have the following Nginx config file: server_tokens off; upstream php-handler { server unix:/var/run/php5-...
1
vote
1answer
3k views

add_header 'Cache-Control' working only without location context

I've installed nginx/1.10.3 (Ubuntu) and changed the original config file so that it is only slightly different at the top of the http context: http { add_header 'Cache-Control' 'no-cache'; and ...
0
votes
1answer
52 views

Is it possible to identify a proxy sever (IP & other headers) as the user who originated the request?

Is it possible to identify a proxy sever (IP & other headers) as the user who originated the request? Example 1 (Standard use case): I have a proxy server a.com that proxies all requests to b....
4
votes
1answer
4k views

HAProxy - Add response header based on request host

I have a HAProxy set up to redirect traffic to a few internal servers. What I'm trying to do is to set some response headers, based on the request host. Unfortunately I can't get it to work. Current ...
0
votes
1answer
608 views

How do I filter tcpdump results based on a missing header?

My HAProxy adds 'X-Proto: SSL' as a header to requests that are over HTTPS. I'd like to use tcpdump to see the 'Host:' header of all requests that do not have that 'X-Proto: SSL' header. Here's what ...
0
votes
1answer
254 views

Which headers take precedence -- the ones set by Nginx or the application server's?

I'm using Nginx on CentOS with a Rails server. I'm confused about how headers get set. If Nginx sets headers and the applicatino server (Ruby on Rails in this case), which one wins out? I have this ...
1
vote
2answers
2k views

Redirect real IP client nginx

How to send to proxied server the real ip of client? My settings are: server { listen 80; server_name foo.example.com; location / { proxy_pass http://someip; proxy_set_header Host $host; ...
7
votes
1answer
7k views

Chrome DevTools - Request Header Size

Is there a way to get the total size (in bytes) of the request header that the browser is sending to the server for each request?
3
votes
1answer
4k views

Nginx on CentOS: How can I change the "Server" header?

I'm running Nginx on Centos6. For security reasons I'd like to change/remove the Server HTTP header contained in the response headers. For instance,nginx's default Sever header looks like:I'm ...
1
vote
1answer
2k views

Postfix swallows Bcc header

I use the postfix 2.9.6 and use a milter to read the contents for my application. I am seeing Postfix swallows Bcc: header from the incoming emails and my milter missed just that Bcc header. Is there ...
2
votes
0answers
932 views

Nginx proxy_pass loses headers when using http2

I've encoutered a problem with nginx losing headers to backend when using http2 protocol on nginx(regular http to Wildfly 10 backend). The below config works when taking the http2 parameter away and ...
3
votes
1answer
661 views

Set environment variables from header for Ruby/Rails app hosted in Nginx/Passenger

I installed a server for Redmine, running with Nginx/Passenger. The server also hosts Gitlab and it goes well. I put some kind of SSO plugin for Redmine (which I found and installed) and it needs an ...
1
vote
1answer
139 views

Postfix MTA - Match string in header fields

I'm trying to block some spammer by filtering some fields in the mail header, but it isn't working. The spammer is adding random domains in the headers, but the "user" is always the same, like this: ...
1
vote
1answer
4k views

Keeping Headers During NGINX Rewrite

I am attempting to set up an NGINX proxy to redirect all requests to one of two servers based on the contents of a query string argument. Essentially: https://my.site.com/api/...&server=a ...
0
votes
1answer
624 views

nginx regex with capture bug

I'm trying to use regex capture functions for create an Access-Control-Origin header. So y have two main capture, one for the adress of website ( likehttp://example.com) and another for the port ...
0
votes
1answer
938 views

Pros/Cons to disabling HEAD requests with Nginx?

I have a static blog/site and I'm wondering if there are any negative implications of disallowing/disabling HEAD requests within my Nginx conf? For example: would it break the site with certain web ...
3
votes
1answer
640 views

Need help determining origin of spam email

As a quick background we have spam that is being sent out with our domain name. As a result we have added SPF record to our domain DNS, now obviously this will assist in making sure this spam is not ...
1
vote
1answer
955 views

Ignoring forwarder IP in syslog-ng

We are getting syslog-ng feeds from a forwarder that we don't control. The issue is that they are using an older version (RHEL 6), and while they have keep_hostnames set to 'yes' (chain_hostnames to '...
4
votes
1answer
2k views

Add proxy headers in named location using nested location regex

I'm trying to setup a WebSocket endpoint on my Rails API using Nginx and Puma. What I have (working but ugly) The following Nginx configuration works fine, however I feel like I could use something ...
0
votes
1answer
1k views

How to avoid duplicated configuration in Nginx Location Config

Take this Nginx location config as example: location ~* \.(gif|jpg|jpeg|swf|css)$ { add_header Cache-Control "max-age=259200, public"; } location ^~ /abc/ { try_files $uri /abc/generic.png; } ...
1
vote
1answer
1k views

Is https preventing a proxy from adding x-forward-for header?

I'm trying to troubleshoot an issue for a user of my service https://jsonip.com. Last week I enabled forcing 301 redirects for all http to https connections. The user I'm trying to help now was ...