Hi ! Thanks for your reply! I read the docs several times and, again today, read several hours tips from groups in the internet, without any help. I just now made a VM with debian and put the following in httpd.conf and left off debians's enabled-sites and available-sites directories: <VirtualHost *:80> ServerName wl1 ServerAlias wl1 DocumentRoot /var/www/test80 <Directory /var/www/test80> Options Indexes FollowSymLinks MultiViews AllowOverride None Order Allow,Deny Allow from All </Directory> LogLevel debug ErrorLog /var/log/apache2/test80-error.log CustomLog /var/log/apache2/test80-access.log combined </VirtualHost> <VirtualHost *:80> ServerName wl2 ServerAlias wl2 DocumentRoot /var/www/test81 <Directory /> Options FollowSymLinks AllowOverride None </Directory> <Directory /var/www/test81> Options Indexes FollowSymLinks MultiViews AllowOverride All Order allow,deny Allow from all </Directory> LogLevel info ErrorLog /var/log/apache2/error-test81.log CustomLog /var/log/apache2/test81-access.log combined </VirtualHost> <VirtualHost _default_:*> ServerName localhost ServerAlias localhost DocumentRoot /var/www </VirtualHost> Anyway, which host-header I specify - any valid ip-address pointing to this machine - strands in the same directory! I have really not any clue, what's going wrong. I tried with different ports also, with no luck. I put the default host on top or on bottom, the result remains the same. It looks like apache never sees or acts on the hostheader! Could you possibly offer more help?? ::Eric Covener:I left off the name/ip in the VirtualHost now. Thanks a lot!! br++mabra -----Original Message----- From: Igor Galic [mailto:i.galic@xxxxxxxxxxxxxx] Sent: Monday, October 18, 2010 1:00 PM To: users@xxxxxxxxxxxxxxxx Subject: Re: Host-header from requests are ignored? ----- mabra@xxxxxxxxxxxx wrote: > Hello ! > > I read the apache docs [using 2.2.9], but there is a lot of stuff, > which is different in Debian [lenny, 5.0.6]. > > Apache ignores the host-header given by the browser: > http://x or http://x:81 or http://x.mbg.local are all served, but > should be > blocked. > The definition for x stems from my hosts file [which everyone could do > this > way]. > I am new new to apache, but on my IIS this works as expected. > All browsers act equal [so no browser header problem]. > > I configured two VirtualHosts, an excerpt: > > NameVirtualHost hugo:80 > > <VirtualHost hugo:80> This looks like bad practice on Apache httpd. > DocumentRoot /usr/share/doc > Alias /doc/ /usr/share/doc/ > <Directory /usr/share/doc/> > Options Indexes MultiViews FollowSymLinks > Allow from 192.168.24.0/24 > </Directory> > </VirtualHost> > > The other VirtualHost is configured for port 81. > > The I go to my hosts file on any box, and add hugo's ip-address under > the new name x. Then, x is served [with and without specifying a > port], > although the host-header in apache is hugo!! Every user coming from > the internet could make the same! > > I am out of hope now. Does anyone has any help for me? Check http://wiki.apache.org/httpd/ExampleVhosts or http://httpd.apache.org/docs/current/vhosts/examples.html out to see some examples for vhosts. What I prefer to do is something like this: # Enable name-based virtual hosts for all interfaces, on port 80 NameVirtualHost *:80 # the first listed vhost will be the default vhost, # it catches all names which do not match: <VirtualHost *:80> <Location /> Deny from all </Location> # Alternatively, you could use mod_rewrite to send 410, as per RFC. </VirtualHost> <VirtualHost *:80> ServerName Hugo </VirtualHost> etc... > Would really very good! > > br++mabra > > > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server > Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx -- Igor Galic Tel: +43 (0) 664 886 22 883 Mail: i.galic@xxxxxxxxxxxxxx URL: http://brainsware.org/ --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx