Welcome! Log In Create A New Profile

Advanced

Re: Web Server Internal IP Address/Internal Network Name Disclosure Vulnerability

Mon Yang
May 28, 2011 12:04AM
Sorry... FQDN = nginx server itself or the backend mail server?

Or, can you tell me how to change 3xx error message, since it might be
safer so it won't break things?

Thank you.

On Fri, May 27, 2011 at 9:50 AM, Igor Sysoev <igor@sysoev.ru> wrote:
> On Fri, May 27, 2011 at 09:24:09AM -0700, Mon Yang wrote:
>> Hi,
>>
>> I did QualysGuard scan and it says "Web Server Internal IP
>> Address/Internal Network Name Disclosure Vulnerability".  It suggest
>> for Apache, I need to:
>>
>>
>> For Apache Web Server:
>> Modify the Apache configuration file as follows:
>> - Set "ServerName" to a proper FQDN.
>> or
>> - Use module mod_rewrite to modify the 3xx error message returned by the server.
>>
>> So what I need to do in nginx to fix this issue?  Thank you.
>
> If you proxy server via nginx, then probably something like this:
>
> server {
>    server_name  FQDN;
>
>    location / {
>        proxy_pass      http://backend;
>        proxy_redirect  http://FQDN/  http://backend/;
>    }
> }
>
>
> --
> Igor Sysoev
>
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://nginx.org/mailman/listinfo/nginx
>

_______________________________________________
nginx mailing list
nginx@nginx.org
http://nginx.org/mailman/listinfo/nginx
Subject Author Posted

Web Server Internal IP Address/Internal Network Name Disclosure Vulnerability

Mon Yang May 27, 2011 12:26PM

Re: Web Server Internal IP Address/Internal Network Name Disclosure Vulnerability

Igor Sysoev May 27, 2011 12:52PM

Re: Web Server Internal IP Address/Internal Network Name Disclosure Vulnerability

Mon Yang May 28, 2011 12:04AM

Re: Web Server Internal IP Address/Internal Network Name Disclosure Vulnerability

Thomas Love May 28, 2011 09:36AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 198
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready