News for hackers. Stuff that matters.

A comment on Create a DNS record for an IP address instantly. Parent comment

Re:Create a DNS record for an IP address instantly by qjz on Friday September 10, 2010 @12:18PM (#1679277)
It's not even necessary to check the HOST header. Simply use name-based virtual hosts and forbid access to the default virtual host. This denies access to simple drive-by bots that crawl IP ranges and others that request a HOST that isn't configured as a virtual host.
[ Parent | on HN ]
Re:Create a DNS record for an IP address instantly by ra on Friday September 10, 2010 @09:29PM (#1680752)
FYI: Name based virtual hosting uses the Host Header to route.

http://en.wikipedia.org/wiki/Virtual_hosting#Name-based

Remember, TCP/IP doesn't specify Hostname, messages are only routed by IP.

HTTP 1.1 specifies the Host Header specifically to enable features like name based virtual hosting.

[ Parent | on HN ]