Content-location file header Definition method (prevent internal IP address leakage II) _win server

When you access a static HTML file on an IIS Web site, such as a index.htm,iis response, a content-location file header is included. If IIS is improperly configured, the Content-location file header will contain the IP address content of the server, causing the leak of the intranet IP address information that is hidden behind the NAT firewall or proxy server, and can be missed by the attacker.

Here's a list of 2 solutions that don't include content-location ' > Header content, so then create a custom file header for it in IIS Manager to return the special Content-location header content.

Let's look at the specific steps:
1, the static page file (such as. htm,.html) renamed to. asp files. Note that after renaming this file, when accessing the original. htm file, the ASP engine is started, and the performance is slightly reduced.
2. Start Internet Service Manager
3, double click "Internet Information Service", expand subordinate content
4, click to process the server name to the left of the + number, expand the subordinate content
5, right click on "Default Web Site", select "Properties"
6, click on the "HTTP Headers" tab

7, in the "Custom Header" section, click "Add"
8, enter "Content-location" in "Custom header name", enter the domain name information you expect in "Custom header value", for example "Http://www.mywebsite.com":

9, click "OK" in turn, complete all modification work