You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "Roger B.A. Klorese" <ro...@queernet.org> on 2003/07/02 15:43:00 UTC
re: [users@httpd] Reverse-proxy problem : Apache lowercases hostnames of rewritten URLs
Hostnames are required to be treated as case-insensitive.
Romain Guilleret <rg...@free.fr> wrote:
__________
>Hi,
>
>I'm currently setting a HTTP/HTTPS reverse-proxy using Apache 2.0.46.
>External urls (let's call them www.externalhost.com) are rewritten to
>internal urls (let's call them INTERNALHOST, as the hostname is upper-case).
>
>When using either ProxyPass or RewriteRule, hostnames of rewritten URLs
>are converted to lowercase.
>
>So using:
>ProxyPass / http://INTERNALHOST/test/
>and requesting http://www.externalhost.com/ makes Apache send
>http://internalhost/test/ URL instead of http://INTERNALHOST/test/ URL.
>
>The applications I'm working with are case-sensitive, and sending
>http://internalhost/test/ instead of http://INTERNALHOST/test/ does not
>work.
>
>Using RewriteRule instead of ProxyPass does not change anything.
>
>So, is there any way of making Apache not lowercase hostnames ?
>
>Romain Guilleret
>
>---------------------------------------------------------------------
>The official User-To-User support forum of the Apache HTTP Server Project.
>See <URL:http://httpd.apache.org/userslist.html> for more info.
>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
>For additional commands, e-mail: users-help@httpd.apache.org
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Hiding webserver name/version from clients
Posted by Miguel González Castaños <mg...@tid.es>.
AFAIK you can use tools as idserve and retrieve some information of the
webserver. What you
say It would be nice to hide some information to the the average user...
HTH
Miguel
Al Caponi ha escrito:
> Hi,
> If I configure Apache not to give any hint on its web pages (e.g. error
> pages) that the web server is Apache, is it possible for an advanced user to
> find out the origin of the webserver through other means?
> Is it possible, for security reasons, in Apache 1.x or 2.x to totally hide
> the webserver name/version from the clients? I.e. If I don't want my clients
> to know that the server they are connecting to is an Apache etc.
>
> Many thanks,
> Al.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
RE: [users@httpd] Hiding webserver name/version from clients
Posted by Jeff Cohen <su...@gej-it.com>.
Check ServerTokens and ServerSignature:
http://httpd.apache.org/docs-2.0/mod/core.html#servertokens
http://httpd.apache.org/docs-2.0/mod/core.html#serversignature
All the best,
Jeff Cohen
Support@GEJ-IT.com
Tel. (416) 917-2324
www.GEJ-IT.com
GEJ-IT Networks!
> -----Original Message-----
> From: Al Caponi [mailto:don_alcaponi@yahoo.com.sg]
> Sent: Thursday, July 03, 2003 5:13 AM
> To: users@httpd.apache.org
> Subject: [users@httpd] Hiding webserver name/version from clients
>
> Hi,
> If I configure Apache not to give any hint on its web pages (e.g. error
> pages) that the web server is Apache, is it possible for an advanced user
to
> find out the origin of the webserver through other means?
> Is it possible, for security reasons, in Apache 1.x or 2.x to totally hide
> the webserver name/version from the clients? I.e. If I don't want my
clients
> to know that the server they are connecting to is an Apache etc.
>
> Many thanks,
> Al.
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
[users@httpd] Hiding webserver name/version from clients
Posted by Al Caponi <do...@yahoo.com.sg>.
Hi,
If I configure Apache not to give any hint on its web pages (e.g. error
pages) that the web server is Apache, is it possible for an advanced user to
find out the origin of the webserver through other means?
Is it possible, for security reasons, in Apache 1.x or 2.x to totally hide
the webserver name/version from the clients? I.e. If I don't want my clients
to know that the server they are connecting to is an Apache etc.
Many thanks,
Al.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Reverse-proxy problem : Apache lowercases hostnames of rewritten URLs
Posted by Robert Andersson <ro...@profundis.nu>.
Roger B.A. Klorese wrote:
> Hostnames are required to be treated as case-insensitive.
Yes, but (IIRC) case should always be preserved. If that was required by the
DNS or HTTP RFC, or both, I cannot remember.
Regards,
Robert Andersson
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org