# Web Server Internal IP Address/Internal Network Name Disclosure Vulnerability

**URL:** <https://www.ruby-forum.com/t/web-server-internal-ip-address-internal-network-name-disclosure-vulnerability/207540>\
**Category:** NGINX\
**Created:** [May 27, 2011, 6:24pm UTC](https://www.ruby-forum.com/t/web-server-internal-ip-address-internal-network-name-disclosure-vulnerability/207540 "2011-05-27T18:24:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![luislavena](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/l/0ea827/32.png) [@luislavena](https://www.ruby-forum.com/u/luislavena)\
**Post date:** [May 27, 2011, 6:24pm UTC](https://www.ruby-forum.com/t/web-server-internal-ip-address-internal-network-name-disclosure-vulnerability/207540/1 "2011-05-27T18:24:41Z")

</div>

Hi,

I did QualysGuard scan and it says “Web Server Internal IP  
Address/Internal Network Name Disclosure Vulnerability”. It suggest  
for Apache, I need to:

For Apache Web Server:  
Modify the Apache configuration file as follows:

- Set “ServerName” to a proper FQDN.  
or
- Use module mod\_rewrite to modify the 3xx error message returned by the  
server.

So what I need to do in nginx to fix this issue? Thank you.

---

<div class="post-metadata">

**Author:** ![Mon\_Y](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/2bfe46/32.png) [@Mon\_Y](https://www.ruby-forum.com/u/Mon_Y)\
**Post date:** [May 27, 2011, 6:51pm UTC](https://www.ruby-forum.com/t/web-server-internal-ip-address-internal-network-name-disclosure-vulnerability/207540/2 "2011-05-27T18:51:15Z")

</div>

On Fri, May 27, 2011 at 09:24:09AM -0700, Mon Y. wrote:

> or
> 
> - Use module mod\_rewrite to modify the 3xx error message returned by the server.
> 
> So what I need to do in nginx to fix this issue? Thank you.

If you proxy server via nginx, then probably something like this:

server {  
server\_name FQDN;

```
location / {
    proxy_pass http://backend;
    proxy_redirect http://FQDN/ http://backend/;
}

```

}

–  
Igor S.

---

<div class="post-metadata">

**Author:** ![Mon\_Y](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/2bfe46/32.png) [@Mon\_Y](https://www.ruby-forum.com/u/Mon_Y)\
**Post date:** [May 28, 2011, 6:02am UTC](https://www.ruby-forum.com/t/web-server-internal-ip-address-internal-network-name-disclosure-vulnerability/207540/3 "2011-05-28T06:02:29Z")

</div>

Sorry… FQDN = nginx server itself or the backend mail server?

Or, can you tell me how to change 3xx error message, since it might be  
safer so it won’t break things?

Thank you.

---

<div class="post-metadata">

**Author:** ![Mon\_Y](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/2bfe46/32.png) [@Mon\_Y](https://www.ruby-forum.com/u/Mon_Y)\
**Post date:** [May 28, 2011, 3:35pm UTC](https://www.ruby-forum.com/t/web-server-internal-ip-address-internal-network-name-disclosure-vulnerability/207540/4 "2011-05-28T15:35:16Z")

</div>

On 28 May 2011 06:02, Mon Y. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> Sorry… FQDN = nginx server itself or the backend mail server?
> 
> nginx server. The full name you would access the site with from the  
> outsite.

> Or, can you tell me how to change 3xx error message, since it might be  
> safer so it won’t break things?
> 
> [GitHub - nginxinc/nginx-wiki: ARCHIVED -- Source for the now archived NGINX Wiki section of https://www.nginx.com · GitHub](http://wiki.nginx.org/HttpCoreModule#error_page)