Re: Invalid HTTP_HOST header Emails

[Stephen Wanhella]

One solution, if anybody else happens to find this thread and just wants 
the emails to stop, is to add the ip address to the list of allowed hosts.
I did this in 
/opt/bitnami/apps/reviewboard/htdocs/rb-sites/reviewboard/conf/settings_local.py.
You can add the ip address to the ALLOWED_HOSTS array.

On Tuesday, February 9, 2016 at 7:51:55 AM UTC-8, Mike Baker wrote:
>
> Mapped the Apache logs. Seems it's just random servers pinging the IP and 
> snooping around for vulnerabilities. 
> Some map to these guys: http://74.82.47.3/
> The other brings up a variety of results in Google 
> https://www.google.ca/?gws_rd=ssl#safe=off=199.115.117.88
>
> In any case, just seems like random bot traffic. I'll look into either 
> outright rejecting web traffic targeted directly at the server's IP or 
> redirecting them with mod_rewrite.
>
> Thanks for the help guys. I'll report back when I have a solution so 
> anyone else having this issue can solve it too. I'm betting most people 
> running Review Board on an EC2 instance see this.
>
> On Monday, February 8, 2016 at 8:33:01 PM UTC-5, Mike Baker wrote:
>>
>> I'll have to look more closely at the Apache logs to figure out if there 
>> is a mapping. To be honest, I don't really care if the site doesn't load 
>> from the direct IP. I just don't want to get the emails all the time :P
>>
>> I'll take a closer look at the logs tomorrow.
>> The mod_rewrite idea is a good one. That will at least stop the emails. I 
>> need to setup the forced rewrite to https for insecure connections anyway 
>> so I'll just add that to the list.
>>
>> Thanks for the quick response and ideas guys!
>>
>> On Monday, February 8, 2016 at 7:47:11 PM UTC-5, Stephen Gallagher wrote:
>>>
>>> Another alternative would be to set up mod_rewrite so that requests to 
>>> the IP address are externally redirected to the hostname (which is probably 
>>> a necessity if you're using HTTPS anyhow).
>>>
>>> On Mon, Feb 8, 2016 at 5:35 PM Christian Hammond  
>>> wrote:
>>>
 Hi Mike,

 We don't (currently) use Django's logging settings, so that can't be 
 disabled the same way. There might be a way to turn off the behavior in a 
 more specific way, but I don't know it (I haven't seen this come up yet so 
 I haven't looked into it).

 Is there anything in your Apache logs that correspond to these access 
 times that can help point you to what's accessing the server with that IP?

 Alternatively, you could add the IP to ALLOWED_HOSTS.

 Christian

 -- 
 Christian Hammond - chri...@beanbaginc.com
 Review Board - https://www.reviewboard.org
 Beanbag, Inc. - https://www.beanbaginc.com

 On Mon, Feb 8, 2016 at 2:32 PM, Mike Baker <
 mba...@karmaninteractive.com> wrote:

> I've been getting the odd email from my Review Board install.
>
> *Subject:*
> [Review Board] ERROR: Invalid HTTP_HOST header: ''.You may 
> need to add u'' to ALLOWED_HOSTS.
>
> *Body:*
> No stack trace available
>
> Request repr() unavailable.
>
>
> In this example  is my servers IP address.
>
> The email gets sent at really odd and infrequent intervals (1-3 times 
> per day). A little Googling around seems to indicate the issue is that 
> someone (or something) is trying to access my server directly by IP 
> rather 
> than using the domain name(s).
>
> Looking at this SO post it seems I can disable the logging in the 
> Django settings but I'm usure of where those are in the RB installation. 
> Can anyone point me in the right direction?
>
> http://stackoverflow.com/questions/22416027/invalid-http-host-header-in-django-1-6-2
>
> Thanks
>
> -- 
> Supercharge your Review Board with Power Pack: 
> https://www.reviewboard.org/powerpack/
> Want us to host Review Board for you? Check out RBCommons: 
> https://rbcommons.com/
> Happy user? Let us know! https://www.reviewboard.org/users/
> --- 
> You received this message because you are subscribed to the Google 
> Groups "reviewboard" group.
> To unsubscribe from this group and stop receiving emails from it, send 
> an email to reviewboard...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

 -- 
 Supercharge your Review Board with Power Pack: 
 https://www.reviewboard.org/powerpack/
 Want us to host Review Board for you? Check out RBCommons: 
 https://rbcommons.com/
 Happy user? Let us know! https://www.reviewboard.org/users/
 --- 
 You received this message because you are subscribed to the Google 
 Groups "reviewboard" group.
 To unsubscribe from this group and stop receiving emails from it, send 
 an email to reviewboard...@googlegroups.com.
 For more options, visit https://groups.google.com/d/optout.

>>>

-- 
Supercharge your Review Board with 

Re: Invalid HTTP_HOST header Emails

[Mike Baker]

Mapped the Apache logs. Seems it's just random servers pinging the IP and 
snooping around for vulnerabilities. 
Some map to these guys: http://74.82.47.3/
The other brings up a variety of results in Google 
https://www.google.ca/?gws_rd=ssl#safe=off=199.115.117.88

In any case, just seems like random bot traffic. I'll look into either 
outright rejecting web traffic targeted directly at the server's IP or 
redirecting them with mod_rewrite.

Thanks for the help guys. I'll report back when I have a solution so anyone 
else having this issue can solve it too. I'm betting most people running 
Review Board on an EC2 instance see this.

On Monday, February 8, 2016 at 8:33:01 PM UTC-5, Mike Baker wrote:
>
> I'll have to look more closely at the Apache logs to figure out if there 
> is a mapping. To be honest, I don't really care if the site doesn't load 
> from the direct IP. I just don't want to get the emails all the time :P
>
> I'll take a closer look at the logs tomorrow.
> The mod_rewrite idea is a good one. That will at least stop the emails. I 
> need to setup the forced rewrite to https for insecure connections anyway 
> so I'll just add that to the list.
>
> Thanks for the quick response and ideas guys!
>
> On Monday, February 8, 2016 at 7:47:11 PM UTC-5, Stephen Gallagher wrote:
>>
>> Another alternative would be to set up mod_rewrite so that requests to 
>> the IP address are externally redirected to the hostname (which is probably 
>> a necessity if you're using HTTPS anyhow).
>>
>> On Mon, Feb 8, 2016 at 5:35 PM Christian Hammond  
>> wrote:
>>
>>> Hi Mike,
>>>
>>> We don't (currently) use Django's logging settings, so that can't be 
>>> disabled the same way. There might be a way to turn off the behavior in a 
>>> more specific way, but I don't know it (I haven't seen this come up yet so 
>>> I haven't looked into it).
>>>
>>> Is there anything in your Apache logs that correspond to these access 
>>> times that can help point you to what's accessing the server with that IP?
>>>
>>> Alternatively, you could add the IP to ALLOWED_HOSTS.
>>>
>>> Christian
>>>
>>> -- 
>>> Christian Hammond - chri...@beanbaginc.com
>>> Review Board - https://www.reviewboard.org
>>> Beanbag, Inc. - https://www.beanbaginc.com
>>>
>>> On Mon, Feb 8, 2016 at 2:32 PM, Mike Baker >> > wrote:
>>>
 I've been getting the odd email from my Review Board install.

 *Subject:*
 [Review Board] ERROR: Invalid HTTP_HOST header: ''.You may 
 need to add u'' to ALLOWED_HOSTS.

 *Body:*
 No stack trace available

 Request repr() unavailable.


 In this example  is my servers IP address.

 The email gets sent at really odd and infrequent intervals (1-3 times 
 per day). A little Googling around seems to indicate the issue is that 
 someone (or something) is trying to access my server directly by IP rather 
 than using the domain name(s).

 Looking at this SO post it seems I can disable the logging in the 
 Django settings but I'm usure of where those are in the RB installation. 
 Can anyone point me in the right direction?

 http://stackoverflow.com/questions/22416027/invalid-http-host-header-in-django-1-6-2

 Thanks

 -- 
 Supercharge your Review Board with Power Pack: 
 https://www.reviewboard.org/powerpack/
 Want us to host Review Board for you? Check out RBCommons: 
 https://rbcommons.com/
 Happy user? Let us know! https://www.reviewboard.org/users/
 --- 
 You received this message because you are subscribed to the Google 
 Groups "reviewboard" group.
 To unsubscribe from this group and stop receiving emails from it, send 
 an email to reviewboard...@googlegroups.com.
 For more options, visit https://groups.google.com/d/optout.

>>>
>>> -- 
>>> Supercharge your Review Board with Power Pack: 
>>> https://www.reviewboard.org/powerpack/
>>> Want us to host Review Board for you? Check out RBCommons: 
>>> https://rbcommons.com/
>>> Happy user? Let us know! https://www.reviewboard.org/users/
>>> --- 
>>> You received this message because you are subscribed to the Google 
>>> Groups "reviewboard" group.
>>> To unsubscribe from this group and stop receiving emails from it, send 
>>> an email to reviewboard...@googlegroups.com.
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>

-- 
Supercharge your Review Board with Power Pack: 
https://www.reviewboard.org/powerpack/
Want us to host Review Board for you? Check out RBCommons: 
https://rbcommons.com/
Happy user? Let us know! https://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"reviewboard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST header Emails

[Mike Baker]

I'll have to look more closely at the Apache logs to figure out if there is 
a mapping. To be honest, I don't really care if the site doesn't load from 
the direct IP. I just don't want to get the emails all the time :P

I'll take a closer look at the logs tomorrow.
The mod_rewrite idea is a good one. That will at least stop the emails. I 
need to setup the forced rewrite to https for insecure connections anyway 
so I'll just add that to the list.

Thanks for the quick response and ideas guys!

On Monday, February 8, 2016 at 7:47:11 PM UTC-5, Stephen Gallagher wrote:
>
> Another alternative would be to set up mod_rewrite so that requests to the 
> IP address are externally redirected to the hostname (which is probably a 
> necessity if you're using HTTPS anyhow).
>
> On Mon, Feb 8, 2016 at 5:35 PM Christian Hammond  > wrote:
>
>> Hi Mike,
>>
>> We don't (currently) use Django's logging settings, so that can't be 
>> disabled the same way. There might be a way to turn off the behavior in a 
>> more specific way, but I don't know it (I haven't seen this come up yet so 
>> I haven't looked into it).
>>
>> Is there anything in your Apache logs that correspond to these access 
>> times that can help point you to what's accessing the server with that IP?
>>
>> Alternatively, you could add the IP to ALLOWED_HOSTS.
>>
>> Christian
>>
>> -- 
>> Christian Hammond - chri...@beanbaginc.com 
>> Review Board - https://www.reviewboard.org
>> Beanbag, Inc. - https://www.beanbaginc.com
>>
>> On Mon, Feb 8, 2016 at 2:32 PM, Mike Baker > > wrote:
>>
>>> I've been getting the odd email from my Review Board install.
>>>
>>> *Subject:*
>>> [Review Board] ERROR: Invalid HTTP_HOST header: ''.You may 
>>> need to add u'' to ALLOWED_HOSTS.
>>>
>>> *Body:*
>>> No stack trace available
>>>
>>> Request repr() unavailable.
>>>
>>>
>>> In this example  is my servers IP address.
>>>
>>> The email gets sent at really odd and infrequent intervals (1-3 times 
>>> per day). A little Googling around seems to indicate the issue is that 
>>> someone (or something) is trying to access my server directly by IP rather 
>>> than using the domain name(s).
>>>
>>> Looking at this SO post it seems I can disable the logging in the Django 
>>> settings but I'm usure of where those are in the RB installation. Can 
>>> anyone point me in the right direction?
>>>
>>> http://stackoverflow.com/questions/22416027/invalid-http-host-header-in-django-1-6-2
>>>
>>> Thanks
>>>
>>> -- 
>>> Supercharge your Review Board with Power Pack: 
>>> https://www.reviewboard.org/powerpack/
>>> Want us to host Review Board for you? Check out RBCommons: 
>>> https://rbcommons.com/
>>> Happy user? Let us know! https://www.reviewboard.org/users/
>>> --- 
>>> You received this message because you are subscribed to the Google 
>>> Groups "reviewboard" group.
>>> To unsubscribe from this group and stop receiving emails from it, send 
>>> an email to reviewboard...@googlegroups.com .
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>
>> -- 
>> Supercharge your Review Board with Power Pack: 
>> https://www.reviewboard.org/powerpack/
>> Want us to host Review Board for you? Check out RBCommons: 
>> https://rbcommons.com/
>> Happy user? Let us know! https://www.reviewboard.org/users/
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "reviewboard" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to reviewboard...@googlegroups.com .
>> For more options, visit https://groups.google.com/d/optout.
>>
>

-- 
Supercharge your Review Board with Power Pack: 
https://www.reviewboard.org/powerpack/
Want us to host Review Board for you? Check out RBCommons: 
https://rbcommons.com/
Happy user? Let us know! https://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"reviewboard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST header Emails

[Christian Hammond]

Hi Mike,

We don't (currently) use Django's logging settings, so that can't be
disabled the same way. There might be a way to turn off the behavior in a
more specific way, but I don't know it (I haven't seen this come up yet so
I haven't looked into it).

Is there anything in your Apache logs that correspond to these access times
that can help point you to what's accessing the server with that IP?

Alternatively, you could add the IP to ALLOWED_HOSTS.

Christian

-- 
Christian Hammond - christ...@beanbaginc.com
Review Board - https://www.reviewboard.org
Beanbag, Inc. - https://www.beanbaginc.com

On Mon, Feb 8, 2016 at 2:32 PM, Mike Baker 
wrote:

> I've been getting the odd email from my Review Board install.
>
> *Subject:*
> [Review Board] ERROR: Invalid HTTP_HOST header: ''.You may need
> to add u'' to ALLOWED_HOSTS.
>
> *Body:*
> No stack trace available
>
> Request repr() unavailable.
>
>
> In this example  is my servers IP address.
>
> The email gets sent at really odd and infrequent intervals (1-3 times per
> day). A little Googling around seems to indicate the issue is that someone
> (or something) is trying to access my server directly by IP rather than
> using the domain name(s).
>
> Looking at this SO post it seems I can disable the logging in the Django
> settings but I'm usure of where those are in the RB installation. Can
> anyone point me in the right direction?
>
> http://stackoverflow.com/questions/22416027/invalid-http-host-header-in-django-1-6-2
>
> Thanks
>
> --
> Supercharge your Review Board with Power Pack:
> https://www.reviewboard.org/powerpack/
> Want us to host Review Board for you? Check out RBCommons:
> https://rbcommons.com/
> Happy user? Let us know! https://www.reviewboard.org/users/
> ---
> You received this message because you are subscribed to the Google Groups
> "reviewboard" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to reviewboard+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
Supercharge your Review Board with Power Pack: 
https://www.reviewboard.org/powerpack/
Want us to host Review Board for you? Check out RBCommons: 
https://rbcommons.com/
Happy user? Let us know! https://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"reviewboard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Invalid HTTP_HOST header Emails

[Mike Baker]

I've been getting the odd email from my Review Board install.

*Subject:*
[Review Board] ERROR: Invalid HTTP_HOST header: ''.You may need 
to add u'' to ALLOWED_HOSTS.

*Body:*
No stack trace available

Request repr() unavailable.


In this example  is my servers IP address.

The email gets sent at really odd and infrequent intervals (1-3 times per 
day). A little Googling around seems to indicate the issue is that someone 
(or something) is trying to access my server directly by IP rather than 
using the domain name(s).

Looking at this SO post it seems I can disable the logging in the Django 
settings but I'm usure of where those are in the RB installation. Can 
anyone point me in the right direction?
http://stackoverflow.com/questions/22416027/invalid-http-host-header-in-django-1-6-2

Thanks

-- 
Supercharge your Review Board with Power Pack: 
https://www.reviewboard.org/powerpack/
Want us to host Review Board for you? Check out RBCommons: 
https://rbcommons.com/
Happy user? Let us know! https://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"reviewboard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST header Emails

[Stephen Gallagher]

Another alternative would be to set up mod_rewrite so that requests to the
IP address are externally redirected to the hostname (which is probably a
necessity if you're using HTTPS anyhow).

On Mon, Feb 8, 2016 at 5:35 PM Christian Hammond 
wrote:

> Hi Mike,
>
> We don't (currently) use Django's logging settings, so that can't be
> disabled the same way. There might be a way to turn off the behavior in a
> more specific way, but I don't know it (I haven't seen this come up yet so
> I haven't looked into it).
>
> Is there anything in your Apache logs that correspond to these access
> times that can help point you to what's accessing the server with that IP?
>
> Alternatively, you could add the IP to ALLOWED_HOSTS.
>
> Christian
>
> --
> Christian Hammond - christ...@beanbaginc.com
> Review Board - https://www.reviewboard.org
> Beanbag, Inc. - https://www.beanbaginc.com
>
> On Mon, Feb 8, 2016 at 2:32 PM, Mike Baker 
> wrote:
>
>> I've been getting the odd email from my Review Board install.
>>
>> *Subject:*
>> [Review Board] ERROR: Invalid HTTP_HOST header: ''.You may
>> need to add u'' to ALLOWED_HOSTS.
>>
>> *Body:*
>> No stack trace available
>>
>> Request repr() unavailable.
>>
>>
>> In this example  is my servers IP address.
>>
>> The email gets sent at really odd and infrequent intervals (1-3 times per
>> day). A little Googling around seems to indicate the issue is that someone
>> (or something) is trying to access my server directly by IP rather than
>> using the domain name(s).
>>
>> Looking at this SO post it seems I can disable the logging in the Django
>> settings but I'm usure of where those are in the RB installation. Can
>> anyone point me in the right direction?
>>
>> http://stackoverflow.com/questions/22416027/invalid-http-host-header-in-django-1-6-2
>>
>> Thanks
>>
>> --
>> Supercharge your Review Board with Power Pack:
>> https://www.reviewboard.org/powerpack/
>> Want us to host Review Board for you? Check out RBCommons:
>> https://rbcommons.com/
>> Happy user? Let us know! https://www.reviewboard.org/users/
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "reviewboard" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to reviewboard+unsubscr...@googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
>>
>
> --
> Supercharge your Review Board with Power Pack:
> https://www.reviewboard.org/powerpack/
> Want us to host Review Board for you? Check out RBCommons:
> https://rbcommons.com/
> Happy user? Let us know! https://www.reviewboard.org/users/
> ---
> You received this message because you are subscribed to the Google Groups
> "reviewboard" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to reviewboard+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
Supercharge your Review Board with Power Pack: 
https://www.reviewboard.org/powerpack/
Want us to host Review Board for you? Check out RBCommons: 
https://rbcommons.com/
Happy user? Let us know! https://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"reviewboard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.