Avatar of scubablue

asked on 

HTTP/1.1 302 Object Moved

We are running a security audit against our load balanced website. When the telnet tool 80 hits an existing directory without hitting a valid page on our site it the browser shows our html page not found redirection, but the telnet session shows the following message

HTTP/1.1 302 Object Moved
Location: http://server01/admin/
Server: Microsoft-IIS/5.0
Content-Type: text/html
Content-Length: 148

Because it shows the server name the Audit tool figures it out that our site is load balanced and it throws an alert. We do not have this problem if we hit a page that does not exist or a page that exist because the Customized Header from IIS show up www.xxx.com instead.

Any suggetion where can I delete or change the Location value on the 302 object moved error?

Web ServersOS SecurityMicrosoft Server OS

Avatar of undefined
Last Comment

8/22/2022 - Mon