search

jech / polipo

The Polipo caching HTTP proxy
http://www.pps.jussieu.fr/~jch/software/polipo/
MIT License
1.81k stars 355 forks source link

Preserve Host Header #29

Closed stirnim closed 10 years ago

stirnim commented 10 years ago

I have a feature request. It would be very useful if polipo had a configuration setting to preserve the host header. It should work like mod_proxy ProxyPreserveHost On|Off: http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxypreservehost

jech commented 10 years ago

Could you please explain why this is useful? Mis-configured DNS?

stirnim commented 10 years ago

I work for the registry of .CH and we notify domain owners of hacked websites which are used in drive by attacks. Domain names for which the domain owners do not clean up their website are blocked. Blocked means, the delegation is removed from the .ch zone. In our "malware domain" process we need to verify if the domain owner has cleaned up their website even if DNS is not working anymore. A lot of hacked websites are on shared hosting infrastructure. One IP address serves many domain names. In this case we need to provide the preserved hostname in the host header if DNS is not working anymore. See also: http://securityblog.switch.ch/2012/11/23/more-malware-distributing-websites-in-q3-2012/

jech commented 10 years ago

Superseded by #30.