Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 351
  • Last Modified:

Host: header makes IE deny cookies?

Hi everyone,

I've been having this same problem all week, and I've finally narrowed it down:

Whenever I try to access my internal web site from Internet Explorer using its windows computer name (http://csi_dev.csint.com), IE will not accept any cookies that are issued.  BUT, if I go to http://localhost or http://192.168.0.1 or http://127.0.0.1 it works just fine -- it accepts the cookies that are issued.

The only difference (that I can see) is in the HTTP request header that IE sends:

Host: csi_dev.csint.com (doesn't work)
Host: localhost (works)
Host: 192.168.0.1 (works)
Host: 127.0.0.1 (works)

I have IE set wide open to accept all cookies (3rd party, session, etc.).

What would make IE deny the cookie based on hostname?

-Doug
0
dougday
Asked:
dougday
  • 4
  • 3
1 Solution
 
dougdayAuthor Commented:
Ah yes, forgot to mention -- all other browsers work (Netscape, Mozilla, Firefox, Opera)...
0
 
caterham_wwwCommented:
may be one thing to try: Did you also try to click on the "Advanced" button on the privacy tab and add explicitly your domain?

btw: Someone else has also the same problem, http:Q_21342993.html , but no solution was found
0
 
dougdayAuthor Commented:
That's worth a shot.  It's at work, so I'll get back to you after the weekend.

Thanks for your help,
-Doug
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
dougdayAuthor Commented:
Nope, still doesn't work.  I've tried everything else I can think of.  For now, I can access things just fine using 192.168.0.1, but I'd rather be able to reference things via csi_dev.csint.com and create virtual hosts for each of our projects.  With the IP-based stuff, that's just not going to work (at least with our network setup).

Any other ideas?

-Doug
0
 
armeenCommented:
it's the underscore in the name, it causes the dns name to be non-rfc complient and ie rejects it (as of a security fix to ie 6 ).  Change the server name to just contain:

letters numbers and hypens and it will work.
0
 
armeenCommented:
you can test it by adding an entry for your server in your c:\windows\system32\drivers\etc\host file (csi-dev.csint.com for example)

ed
0
 
dougdayAuthor Commented:
THANK YOU!!

There was no end to my frustration with this -- Thanks!!!
-Doug
0
 
armeenCommented:
no problem.
0

Featured Post

[Webinar On Demand] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now