« Previous Next »

• 09-10-2009, 5:08 PM

  mhnash Joined on 09-10-2009, 9:01 PM Posts 2

  Removeserverheader=1 causes http 400 bad request error Reply Contact We need to hide the server header in HTTP respones. When I set the urlscan parameter, Removeserverheader to 1, the server header is not present in an HTTP response test. However, when the url for the login page to our site is accesed, a Page Cannot be Found error page displays with HTTP 400 bad request. I set the value back to the default of 0, restart IIS and the login page works again. The same thing happens when we try to use the Alternateservername option as well.

  Tags: UrlScanUrlScan 3.0URLScan 3.1URLScan 3.xUrl Scan

• 09-10-2009, 7:08 PM

  In reply to

  lextm Joined on 10-22-2008, 12:18 AM Shanghai, PRC Posts 1,427	Re: Removeserverheader=1 causes http 400 bad request error Reply Contact You'd better open URLScan log and check what was recorded when it returned 400. Lex Li Support Engineer at Microsoft --------------------------- This posting is provided "AS IS" with no warranties, and confers no rights.

• 09-11-2009, 11:03 AM

  In reply to

  mhnash Joined on 09-10-2009, 9:01 PM Posts 2	Re: Removeserverheader=1 causes http 400 bad request error Reply Contact There are no entries in the URL scan logs when this happens.

• 09-11-2009, 11:26 AM

  In reply to

  tomkmvp Joined on 03-20-2003, 10:27 AM Central NJ Posts 6,244	Re: Removeserverheader=1 causes http 400 bad request error Reply Contact mhnash: We need to hide the server header in HTTP respones. Why? Tom Kaminski IIS MVP http://mvp.support.microsoft.com/ http://blogs.iis.net/tomkmvp/ http://www.linkedin.com/pub/8/690/408 http://www.bluesrepublic.org/

• 09-11-2009, 10:42 PM

  In reply to

  lextm Joined on 10-22-2008, 12:18 AM Shanghai, PRC Posts 1,427	Re: Removeserverheader=1 causes http 400 bad request error Reply Contact Well, lots of so called "security policies" require that though it does not add some real-world value.  Lex Li Support Engineer at Microsoft --------------------------- This posting is provided "AS IS" with no warranties, and confers no rights.

• 09-14-2009, 11:09 AM

  In reply to

  tomkmvp Joined on 03-20-2003, 10:27 AM Central NJ Posts 6,244	Re: Removeserverheader=1 causes http 400 bad request error Reply Contact That's what I'm assuming but wanted to hear it from directly the OP. People look to jump through all sorts of silly hoops for no real benefit or value ... Tom Kaminski IIS MVP http://mvp.support.microsoft.com/ http://blogs.iis.net/tomkmvp/ http://www.linkedin.com/pub/8/690/408 http://www.bluesrepublic.org/