Re: [users@httpd] Avoiding host header exploit in apache

Thanks Daniel for response. Will check and try this. On Sat, Aug 28, 2021 at 4:17 AM Daniel Ferradal wrote: > Define servername with the ip if necessary and do not use RewriteRules > which use %{HTTP_HOST} variable, specify your ip/host manually in the > rewrite. > > El vie, 27 ago 2021 a las

Re: [users@httpd] Avoiding host header exploit in apache

Define servername with the ip if necessary and do not use RewriteRules which use %{HTTP_HOST} variable, specify your ip/host manually in the rewrite. El vie, 27 ago 2021 a las 10:42, alchemist vk () escribió: > > Hi All, > I am running Apache 2.4.46 and below is the problem statement. > system

[users@httpd] Avoiding host header exploit in apache

Hi All, I am running Apache 2.4.46 and below is the problem statement. system IP: 10.10.10.10 Client IP: 10.10.10.20 When I make a request like *curl -vk 'https://10.10.10.10 ' -H "Host: badsite.com "*, its redirecting to