IIS Server Security - IIS 6.0 - no host header value - Are host header requests processe

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > November 2007 > IIS 6.0 - no host header value - Are host header requests processe





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author IIS 6.0 - no host header value - Are host header requests processe
asmizer

2007-11-16, 1:39 pm

IIS 6.0, the site does not have a "host header value" it is the
"Default:None".

What happens when an initial get request does not contain the site header?
E.g The Get comes to my IP address but instead of askign for "mysite.com" it
contains "yoursite.com"? Given that mysite.com resolves to the requested IP
address and Yoursite.com does not resolve to the requested IP address.
Ken Schaefer

2007-11-16, 1:39 pm

"asmizer" <asmizer@discussions.microsoft.com> wrote in message
news:8D0A3C8F-472A-4382-AE0D-A0CAAB1088F9@microsoft.com...
> IIS 6.0, the site does not have a "host header value" it is the
> "Default:None".
>
> What happens when an initial get request does not contain the site header?
> E.g The Get comes to my IP address but instead of askign for "mysite.com"
> it
> contains "yoursite.com"? Given that mysite.com resolves to the requested
> IP
> address and Yoursite.com does not resolve to the requested IP address.


If yoursite.com does not resolve to the IP address, why is the browser even
making the request to your webserver (except possibly to log spam in your
logfiles)

IIS will match incoming requests to sites from the most specific to the
least specific bindings.

If you have a site that listens on "all unassigned" and has no host header,
it will get all requests that can not be routed to a more specific site.

Cheers
Ken

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com