Forum Discussion
jmasgalas
Mar 03, 2020Nimbostratus
Web Server HTTP Header Internal IP Disclosure
One of my virtual servers returns the vulnerability Web Server HTTP Header Internal IP Disclosure during a Nessus scan. Security is asking me to fix this but I am not sure how. I tried creating a tra...
tiziano_rosato
Mar 03, 2020Cirrus
if the problem is the Location header that expose an IP address you can try with a simple irule that will rewrite the Location, for example:
when HTTP_RESPONSE {
if { [HTTP::header is_redirect]} {
HTTP::header replace Location [string map -nocase {1.1.1.1 www.something.com} [HTTP::header value Location]]
}
}
But you can implement something similar using an LTM policy.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects