How to remove “Client-Peer” (etc) header in nginx with php-fastcgiHow to remove IIS/ASP.NET Response HeadersExpires directive returned in the ngix server response headernginx & php-fpm and custom headerIs it possible to tell nginx over fastcgi to pass a Connection: close header through unaltered?Remove X-Powered-By: PHP on IIS7Add custom headers to HTTP 401 responses from Kerberos mod_auth_kerbnginx 1.8.1 is not caching with Vary Accept headerFastCGI: Access deniedGetting HTTP response with date before request date. Is that right?Nginx on CentOS: How can I change the “Server” header?
Why would company (decision makers) wait for someone to retire, rather than lay them off, when their role is no longer needed?
Is there an academic word that means "to split hairs over"?
FIFO data structure in pure C
Could a space colony 1g from the sun work?
Usage of the relative pronoun "dont"
When did Britain learn about American independence?
Why doesn't Iron Man's action affect this person in Endgame?
Holding rent money for my friend which amounts to over $10k?
Cuban Primes
Why would you put your input amplifier in front of your filtering for and ECG signal?
How to deal with the extreme reverberation in big cathedrals when playing the pipe organs?
Deleting the same lines from a list
How long do Aarakocra live?
Is it standard for US-based universities to consider the ethnicity of an applicant during PhD admissions?
Why did the soldiers of the North disobey Jon?
I recently started my machine learning PhD and I have absolutely no idea what I'm doing
How to continually and organically let my readers know what time it is in my story?
Would life always name the light from their sun "white"
Assign the same string to multiple variables
Why is it correct to use ～た in this sentence, even though we're talking about next week?
Write electromagnetic field tensor in terms of four-vector potential
What are the effects of eating many berries from the Goodberry spell per day?
Is it standard to have the first week's pay indefinitely withheld?
Polynomial division: Is this trick obvious?
How to remove “Client-Peer” (etc) header in nginx with php-fastcgi
How to remove IIS/ASP.NET Response HeadersExpires directive returned in the ngix server response headernginx & php-fpm and custom headerIs it possible to tell nginx over fastcgi to pass a Connection: close header through unaltered?Remove X-Powered-By: PHP on IIS7Add custom headers to HTTP 401 responses from Kerberos mod_auth_kerbnginx 1.8.1 is not caching with Vary Accept headerFastCGI: Access deniedGetting HTTP response with date before request date. Is that right?Nginx on CentOS: How can I change the “Server” header?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
My setup:
- OS: Ubuntu 11.04
- HTTP Server: nginx 1.2.1
- compiled with the HttpHeadersMore module
- processing PHP via php-fastcgi
- (other irrelevant software - ruby, python, etc)
My problem:
I'm trying to completely mask the software which serves the pages (partly security, mostly because it's fun), I've managed to change the server name and remove the X-Powered-By header which php-fastcgi adds, but I'm having trouble removing three headers:
Client-Date: Thu, 14 Jun 2012 20:32:34 GMT
Client-Peer: 205.186.146.37:80
Client-Response-Num: 1
I have used more_clear_headers from the HttpHeadersMore module but that has no effect, despite being able to remove the X-Powered-By headers.
This is in my http block
more_set_headers "Server: Tesco Value";
more_clear_headers "X-Powered-By";
more_clear_headers "Client-*";
more_clear_headers "Client-Date";
more_clear_headers "Client-Response-Num";
more_clear_headers "Client-Peer";
more_clear_headers "X-Pingback";
add_header X-Required-Volume-Setting 11;
add_header X-Required-Speed 88mph;
# NEW: added in thanks to the answer from @kworr - but still doesn't work
fastcgi_hide_header "Client-Date";
fastcgi_hide_header "Client-Response-Num";
fastcgi_hide_header "Client-Peer";
If you run HEAD slightlymore.co.uk you'll see that neither explicit nor wildcard rules get rid of the header. I'm guessing that these headers are set after the output-header-filter phase - but I'd like to know if anyone has any more information on this, and especially if anyone has a solution.
UPDATE
@kworr suggested that fastcgi_hide_header might be what I'm looking for - but still doesn't work. Perhaps it's just my system?
nginx http-headers
edited Mar 5 '16 at 22:29
sysadmin1138♦
118k17146282
asked Jun 14 '12 at 20:42
iblamefishiblamefish
13316
add a comment |
My setup:
- OS: Ubuntu 11.04
- HTTP Server: nginx 1.2.1
- compiled with the HttpHeadersMore module
- processing PHP via php-fastcgi
- (other irrelevant software - ruby, python, etc)
My problem:
I'm trying to completely mask the software which serves the pages (partly security, mostly because it's fun), I've managed to change the server name and remove the X-Powered-By header which php-fastcgi adds, but I'm having trouble removing three headers:
Client-Date: Thu, 14 Jun 2012 20:32:34 GMT
Client-Peer: 205.186.146.37:80
Client-Response-Num: 1
I have used more_clear_headers from the HttpHeadersMore module but that has no effect, despite being able to remove the X-Powered-By headers.
This is in my http block
more_set_headers "Server: Tesco Value";
more_clear_headers "X-Powered-By";
more_clear_headers "Client-*";
more_clear_headers "Client-Date";
more_clear_headers "Client-Response-Num";
more_clear_headers "Client-Peer";
more_clear_headers "X-Pingback";
add_header X-Required-Volume-Setting 11;
add_header X-Required-Speed 88mph;
# NEW: added in thanks to the answer from @kworr - but still doesn't work
fastcgi_hide_header "Client-Date";
fastcgi_hide_header "Client-Response-Num";
fastcgi_hide_header "Client-Peer";
If you run HEAD slightlymore.co.uk you'll see that neither explicit nor wildcard rules get rid of the header. I'm guessing that these headers are set after the output-header-filter phase - but I'd like to know if anyone has any more information on this, and especially if anyone has a solution.
UPDATE
@kworr suggested that fastcgi_hide_header might be what I'm looking for - but still doesn't work. Perhaps it's just my system?
nginx http-headers
edited Mar 5 '16 at 22:29
sysadmin1138♦
118k17146282
asked Jun 14 '12 at 20:42
iblamefishiblamefish
13316
add a comment |
My setup:
- OS: Ubuntu 11.04
- HTTP Server: nginx 1.2.1
- compiled with the HttpHeadersMore module
- processing PHP via php-fastcgi
- (other irrelevant software - ruby, python, etc)
My problem:
I'm trying to completely mask the software which serves the pages (partly security, mostly because it's fun), I've managed to change the server name and remove the X-Powered-By header which php-fastcgi adds, but I'm having trouble removing three headers:
Client-Date: Thu, 14 Jun 2012 20:32:34 GMT
Client-Peer: 205.186.146.37:80
Client-Response-Num: 1
I have used more_clear_headers from the HttpHeadersMore module but that has no effect, despite being able to remove the X-Powered-By headers.
This is in my http block
more_set_headers "Server: Tesco Value";
more_clear_headers "X-Powered-By";
more_clear_headers "Client-*";
more_clear_headers "Client-Date";
more_clear_headers "Client-Response-Num";
more_clear_headers "Client-Peer";
more_clear_headers "X-Pingback";
add_header X-Required-Volume-Setting 11;
add_header X-Required-Speed 88mph;
# NEW: added in thanks to the answer from @kworr - but still doesn't work
fastcgi_hide_header "Client-Date";
fastcgi_hide_header "Client-Response-Num";
fastcgi_hide_header "Client-Peer";
If you run HEAD slightlymore.co.uk you'll see that neither explicit nor wildcard rules get rid of the header. I'm guessing that these headers are set after the output-header-filter phase - but I'd like to know if anyone has any more information on this, and especially if anyone has a solution.
UPDATE
@kworr suggested that fastcgi_hide_header might be what I'm looking for - but still doesn't work. Perhaps it's just my system?
nginx http-headers
edited Mar 5 '16 at 22:29
sysadmin1138♦
118k17146282
asked Jun 14 '12 at 20:42
iblamefishiblamefish
13316
My setup:
- OS: Ubuntu 11.04
- HTTP Server: nginx 1.2.1
- compiled with the HttpHeadersMore module
- processing PHP via php-fastcgi
- (other irrelevant software - ruby, python, etc)
My problem:
I'm trying to completely mask the software which serves the pages (partly security, mostly because it's fun), I've managed to change the server name and remove the X-Powered-By header which php-fastcgi adds, but I'm having trouble removing three headers:
Client-Date: Thu, 14 Jun 2012 20:32:34 GMT
Client-Peer: 205.186.146.37:80
Client-Response-Num: 1
I have used more_clear_headers from the HttpHeadersMore module but that has no effect, despite being able to remove the X-Powered-By headers.
This is in my http block
more_set_headers "Server: Tesco Value";
more_clear_headers "X-Powered-By";
more_clear_headers "Client-*";
more_clear_headers "Client-Date";
more_clear_headers "Client-Response-Num";
more_clear_headers "Client-Peer";
more_clear_headers "X-Pingback";
add_header X-Required-Volume-Setting 11;
add_header X-Required-Speed 88mph;
# NEW: added in thanks to the answer from @kworr - but still doesn't work
fastcgi_hide_header "Client-Date";
fastcgi_hide_header "Client-Response-Num";
fastcgi_hide_header "Client-Peer";
If you run HEAD slightlymore.co.uk you'll see that neither explicit nor wildcard rules get rid of the header. I'm guessing that these headers are set after the output-header-filter phase - but I'd like to know if anyone has any more information on this, and especially if anyone has a solution.
UPDATE
@kworr suggested that fastcgi_hide_header might be what I'm looking for - but still doesn't work. Perhaps it's just my system?
nginx http-headers
nginx http-headers
edited Mar 5 '16 at 22:29
sysadmin1138♦
118k17146282
asked Jun 14 '12 at 20:42
iblamefishiblamefish
13316
edited Mar 5 '16 at 22:29
sysadmin1138♦
118k17146282
asked Jun 14 '12 at 20:42
iblamefishiblamefish
13316
edited Mar 5 '16 at 22:29
sysadmin1138♦
118k17146282
edited Mar 5 '16 at 22:29
sysadmin1138♦
118k17146282
edited Mar 5 '16 at 22:29
sysadmin1138♦
118k17146282
118k17146282
asked Jun 14 '12 at 20:42
iblamefishiblamefish
13316
asked Jun 14 '12 at 20:42
iblamefishiblamefish
13316
asked Jun 14 '12 at 20:42
iblamefishiblamefish
13316
13316
add a comment |
add a comment |
2 Answers
2
active
oldest
votes
Those headers were not present in the HTTP response at all. Neither nginx nor php-fpm ever sent them, so trying to block them is pointless.
They are synthetic response headers added to the response by your user agent, libwww-perl.
If you don't wish to see them, make HTTP requests with some other library, such as libcurl.
answered Mar 16 '18 at 21:19
Michael Hampton♦Michael Hampton
177k27322655
add a comment |
I think fastcgi_hide_header is what you really need.
answered Jun 14 '12 at 21:05
kworrkworr
975614
I tried that but it doesn't seem to work either. I tried replacingmore_clear_headers, using it as well asmore_clear_headers, and tried all the different contexts, but the headers are still there :( Question updated accordingly.
– iblamefish
Jun 17 '12 at 17:15
Your Nginx has to include the "headers more" module. You can check if it's built using with "nginx -V" - look for "headers-more-nginx-module" in the output. Building Nginx is easy. Once that's done this is an example of a working way to clear headers : more_clear_headers Server;
– Tim
May 2 '17 at 20:14
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f398938%2fhow-to-remove-client-peer-etc-header-in-nginx-with-php-fastcgi%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
Those headers were not present in the HTTP response at all. Neither nginx nor php-fpm ever sent them, so trying to block them is pointless.
They are synthetic response headers added to the response by your user agent, libwww-perl.
If you don't wish to see them, make HTTP requests with some other library, such as libcurl.
answered Mar 16 '18 at 21:19
Michael Hampton♦Michael Hampton
177k27322655
add a comment |
Those headers were not present in the HTTP response at all. Neither nginx nor php-fpm ever sent them, so trying to block them is pointless.
They are synthetic response headers added to the response by your user agent, libwww-perl.
If you don't wish to see them, make HTTP requests with some other library, such as libcurl.
answered Mar 16 '18 at 21:19
Michael Hampton♦Michael Hampton
177k27322655
add a comment |
Those headers were not present in the HTTP response at all. Neither nginx nor php-fpm ever sent them, so trying to block them is pointless.
They are synthetic response headers added to the response by your user agent, libwww-perl.
If you don't wish to see them, make HTTP requests with some other library, such as libcurl.
answered Mar 16 '18 at 21:19
Michael Hampton♦Michael Hampton
177k27322655
Those headers were not present in the HTTP response at all. Neither nginx nor php-fpm ever sent them, so trying to block them is pointless.
They are synthetic response headers added to the response by your user agent, libwww-perl.
If you don't wish to see them, make HTTP requests with some other library, such as libcurl.
answered Mar 16 '18 at 21:19
Michael Hampton♦Michael Hampton
177k27322655
edited May 16 '18 at 1:19
answered Mar 16 '18 at 21:19
Michael Hampton♦Michael Hampton
177k27322655
answered Mar 16 '18 at 21:19
Michael Hampton♦Michael Hampton
177k27322655
answered Mar 16 '18 at 21:19
Michael Hampton♦Michael Hampton
177k27322655
177k27322655
add a comment |
add a comment |
I think fastcgi_hide_header is what you really need.
answered Jun 14 '12 at 21:05
kworrkworr
975614
I tried that but it doesn't seem to work either. I tried replacingmore_clear_headers, using it as well asmore_clear_headers, and tried all the different contexts, but the headers are still there :( Question updated accordingly.
– iblamefish
Jun 17 '12 at 17:15
Your Nginx has to include the "headers more" module. You can check if it's built using with "nginx -V" - look for "headers-more-nginx-module" in the output. Building Nginx is easy. Once that's done this is an example of a working way to clear headers : more_clear_headers Server;
– Tim
May 2 '17 at 20:14
add a comment |
I think fastcgi_hide_header is what you really need.
answered Jun 14 '12 at 21:05
kworrkworr
975614
I tried that but it doesn't seem to work either. I tried replacingmore_clear_headers, using it as well asmore_clear_headers, and tried all the different contexts, but the headers are still there :( Question updated accordingly.
– iblamefish
Jun 17 '12 at 17:15
Your Nginx has to include the "headers more" module. You can check if it's built using with "nginx -V" - look for "headers-more-nginx-module" in the output. Building Nginx is easy. Once that's done this is an example of a working way to clear headers : more_clear_headers Server;
– Tim
May 2 '17 at 20:14
add a comment |
I think fastcgi_hide_header is what you really need.
answered Jun 14 '12 at 21:05
kworrkworr
975614
I think fastcgi_hide_header is what you really need.
answered Jun 14 '12 at 21:05
kworrkworr
975614
answered Jun 14 '12 at 21:05
kworrkworr
975614
answered Jun 14 '12 at 21:05
kworrkworr
975614
answered Jun 14 '12 at 21:05
kworrkworr
975614
975614
I tried that but it doesn't seem to work either. I tried replacingmore_clear_headers, using it as well asmore_clear_headers, and tried all the different contexts, but the headers are still there :( Question updated accordingly.
– iblamefish
Jun 17 '12 at 17:15
Your Nginx has to include the "headers more" module. You can check if it's built using with "nginx -V" - look for "headers-more-nginx-module" in the output. Building Nginx is easy. Once that's done this is an example of a working way to clear headers : more_clear_headers Server;
– Tim
May 2 '17 at 20:14
add a comment |
I tried that but it doesn't seem to work either. I tried replacingmore_clear_headers, using it as well asmore_clear_headers, and tried all the different contexts, but the headers are still there :( Question updated accordingly.
– iblamefish
Jun 17 '12 at 17:15
Your Nginx has to include the "headers more" module. You can check if it's built using with "nginx -V" - look for "headers-more-nginx-module" in the output. Building Nginx is easy. Once that's done this is an example of a working way to clear headers : more_clear_headers Server;
– Tim
May 2 '17 at 20:14
I tried that but it doesn't seem to work either. I tried replacing
more_clear_headers, using it as well as more_clear_headers, and tried all the different contexts, but the headers are still there :( Question updated accordingly.– iblamefish
Jun 17 '12 at 17:15
I tried that but it doesn't seem to work either. I tried replacing
more_clear_headers, using it as well as more_clear_headers, and tried all the different contexts, but the headers are still there :( Question updated accordingly.– iblamefish
Jun 17 '12 at 17:15
Your Nginx has to include the "headers more" module. You can check if it's built using with "nginx -V" - look for "headers-more-nginx-module" in the output. Building Nginx is easy. Once that's done this is an example of a working way to clear headers : more_clear_headers Server;
– Tim
May 2 '17 at 20:14
Your Nginx has to include the "headers more" module. You can check if it's built using with "nginx -V" - look for "headers-more-nginx-module" in the output. Building Nginx is easy. Once that's done this is an example of a working way to clear headers : more_clear_headers Server;
– Tim
May 2 '17 at 20:14
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f398938%2fhow-to-remove-client-peer-etc-header-in-nginx-with-php-fastcgi%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
