Search results matching tag 'host header'

How to remove IIS version name from the http header

sunitha4ever — Fri, 06 Nov 2009 06:21:49 GMT

Hi,

My web application runs on Windows server 2008 and IIS7.Currently, we are facing a security issue where in we need to reove the IIS version from the http header.

I would be glad if someone can help me out on this.

Regards,

Sunitha

ARR or URL Rewrite via Hosted headers

TJJones — Thu, 24 Sep 2009 14:10:54 GMT

I want to use the ARR or URL Rewrite to route based on Hosted headers.

Example:

site1.domain.com > 10.10.10.1 server

site2.domain.com > 10.10.10.2 server

site3.domain2.com > 10.10.10.1 server

I can't seem to find a simple way to set this up. Any assistance would be appreciated.

Thanks,

DNS to point to intranet application (multiple sites on IIS server)

dhassen — Tue, 01 Sep 2009 14:57:22 GMT

Hi everyone. We're recently moved all our servers over to Server 2008, so great, I can play with IIS 7.

We have 2 intranet sites, and I've set up a host header record for the second site called ams.

We used to have internal DNS servers point 'ams' to the IP of the webserver, which uses the host header to point to the web app.

I've recreated all this again now we've switched over our servers but when you ping or type in ams into a browser it doesn't work. ping ams gives: could not find the host please check and try again, and in a browser (depending on browser) I just get redirected to a google search results page for ams. Very confusing for my users.

I can't 'browse' the site either, via IIS manager.

Has anyone got any ideas how I can fix this / what's gone wrong / how I can trouble shoot this?

The 'Default' intranet site works fine with internal and external DNS, using a totally different domain name.

Thanks

Removing HTTPS binding on one site breaks all sites

dtatgenho — Thu, 23 Jul 2009 23:10:25 GMT

Hi,

I was reading this post earlier, as we are running into this issue too (SSL using a wildcart cert on multiple subdomain websites).

In anilr's reply (2nd post of the thread), he says: "removing the bindings in the UI will remove both those things which will of course make your other sites non-functional - you need to remove just the binding in applicationhost.config using other means like appcmd/editing in notepad etc."

So, in other words, removing the SSL cert binding of one site (via the UI) will break the SSL bindings of ALL of the other sites. This seems like a huge problem/limitation of the UI, especially since this can be done properly (as anilr also states) by editing the applicationhost.config file (either manually or programmatically).

This, frankly, seems like a bug, as this behavior is not expected nor implied by the user's action (by editing a single site, you break all of them). Is this fixed in Server 2008 R2 or by a future service pack/hotfix?

The reason I ask is because we are testing out a hosted environment like this (wildcard SSL cert (*.mysite.com), single IP, bound to many subdomain sites via host headers (site1.mysite.com, site2.mysite.com, etc.)) and having the "touch one binding, break them all" issue with the UI just makes things way too easy to screw up.

Anyone know if this will be fixed or if there is something I am missing?

Re: Wildcard host header support

AJStevens — Thu, 09 Jul 2009 16:06:47 GMT

I've read about this online, as I want to do a simliar thing.

The problem with the "IP" solution is it will only work for one site, on one IIS install, AND someone could register a dodgy domain name and point it to your IP and they'd get your website.

What I have come up with (and waiting on the tests to confirm) is a workaround using ISAPI_Rewrite (which I suspect some of you are using anyway and have a .htaccess file with rules).

Now, my solution is to put a .htaccess file in the root folder of the Default website, something like (might need some tweaking):

RewriteEngine on

RewriteCond %{HTTPS} (on)?
RewriteCond %{HTTP_HOST} ^(?!(?:www))([^.]+)\.([^.]+\.[^.]+)$ [NC]
RewriteRule ^([^.]+)?$ http(?%1s)://www.%3/(?1$1) [NC,P,QSA]

Now, not forgetting your * DNS A record. What will happen is a user goes to whatever.mydomain.com and it will go to the IIS server, fail to find a match Host Header wise and will instead return the default website ("Under Construction" page), except with that .htaccess file and ISAPI-Rewrite it won't display the "Under Construction" page, as it will run this rule in the .htaccess file and instead pull in the equivalent from www.mydomain.com where more than likely you will have your actual .htaccess file in the root of your www website and where now you can not only specify rules for your www.domain.com but anything.yourdomain.com

Most commonly you'll want something that does http://username.mydomain.com to pull in data from www.mydomain.com/users.php?user=username for example.

If you don't have a .htaccess file with rules, then you'll just get your www.mydomain.com website but as subdomain.mydomain.com instead.

Of course if you own the server (VPS or dedicated) you can tweak this "main" rule even more, but that was a generic one I hope shared hosting IIS companies could incorporate. Perhaps with a tagline of "Dynamic Subdomains".

Re: IIS & URL-REWRITE

ruslany — Mon, 08 Jun 2009 17:16:04 GMT

If you want your web site to be accessible via bcdcon.com and then redirect to www.bcdcon.com, then you will need to add two host header bindings for that web site in iis: one for "bcdcon.com" and one for www.bcdcon.com.

Re: regular expression to check for www

ruslany — Fri, 15 May 2009 15:51:54 GMT

Yes.

IIS6 to IIS7 migration

notcon — Thu, 14 May 2009 08:08:21 GMT

Hi,

We have all our sites on a 2003 server running IIS6.

We wish to migrate all these sites (including app pools, user accounts, ftp details but NOT content to our new 2008 server running iis7 and ftp7.5. Thje content will be migrated first separately. We also wish to replace all IP addresses with a new one.

We wish to do this via the archive/package method.

I have tested the deploy tool and can migrate basic site definitions but app pools, users and ftp accounts don't seem to migrate at all.

Please can someone advise as to what commands we need to use.

Thanks.

Nathan

IIS doesnt like 2 sites on port 80 here

joeri87 — Wed, 13 May 2009 08:46:43 GMT

Hello,

We are trying to set 2 website to port 80 in IIS (webmail and sharepoint). The webmail site is working but when we try to change the sharepoint link to 80 and put in a different host header the site won’t start. Using port 8080 it does start, but it’s not what we want.
Same goes if we switch it, 1 site on port 80 always works but when we try to start the 2nd one IIS says there already is a site on port 80 and doest start it.
They do have different host headers.

Is there any common problem that can cause this?

Thanks!
Joeri

Seek Professional Help!!!

goldentine — Mon, 11 May 2009 13:30:21 GMT

I need professional help here... Here's the situation... I have product URL's going to detail pages. On that page it breaks out into sub-sections, at times it also carries extra parameters in the query string other than "v" and "fa"... note that "v" is an alpha-numeric product ID, and "fa" is the sub-section

res/stat.cfm?v=id (default page)
res/stat.cfm?v=id&fa=graphs
res/stat.cfm?v=id&fa=comments
res/stat.cfm?v=id&fa=whatever

I'm looking to create rule(s) like the following:

alphanumericID
alphanumericID/graphs
alphanumericID/comments
alphanumericID/whatever

I'm thinking the second parameter after the ID needs to be written as some kind of wildcard so that it will work in any of the above examples??

I'm also looking for these rule requirements:

no hardcoded rule values (ex: graphs, comments, etc) as they get changed at times.
make sure the alphanumericID is just that (regex A-Z 0-9), if not, skip rule
direct access to "res/stat.cfm" forces a "url has moved" host headers then redirects to the rewritten version.
It would also be nice to be able to access the "res/stat.cfm" directly for testing and development purposes and bypass the redirect... (ex: res/stat.cfm?id=abc123&bypass=1)

Here's what I have so far which is not flexible and error prone.....

Pattern: ^([^/]+)/?$

Rewrite URL: res/stat.cfm?v={R:1}

Clearly this doesn't do what I need it to do and far from flexible... I've been banging my head against the wall trying different things with minimal success. I know there's someone out there that could probably write this up in 2 minutes!

I'd greatly appreciate the help! Thanks big time in advance!

By the way, the site in question is... http://www.cbengine.com