Web Server HTTP Header Internal IP Disclosure

Thanks for the reply. I did create the irule but Nessus is still detecting the same vulnerability. This is frustrating to say the least.

Here is my irule:

when HTTP_RESPONSE {

 if { [HTTP::header is_redirect]} {

  HTTP::header replace Location [string map -nocase {1.1.1.1 securitycode.summithealth.org} [HTTP::header value Location]]

 }

}

I then tried something similar using a policy:

http header named Content-Location contains any of x.x.x.x at response time.

Replace http header named Content-Location with value securitycode.summithealth.org at response time.

Still not resolved.