weird 403 (forbidden) website access issue
norman.gray at glasgow.ac.uk
Tue Mar 31 21:38:28 UTC 2020
On 31 Mar 2020, at 21:33, Gary Aitken wrote:
> The addr (www.ovandoschool.org) resolves to 188.8.131.52
> If I type in 184.108.40.206 in the address bar, I get a 403 error
> with a note
> 220.127.116.11/cp_errordocument.shtml (port 80)
> Seems to be accessible fine from windows machines going through the
> fbsd 11.3-RELEASE-P6 gateway (not the same system as the one with the
> browser having the problem).
> If I manually access from the failing fbsd system, it works:
> $ telnet 18.104.22.168 80
> Trying 22.214.171.124...
> Connected to chi-node42.websitehostserver.net.
> Escape character is '^]'.
> GET / HTTP/1.1
> Host: www.ovandoschool.org
If you type the IP address in to the address bar, then the browser will
either send that as the 'Host' request header, or won't send the header
at all. Thus the server, presuming it's set up to serve multiple hosts,
won't know which website to send back.
An alternative route to the same conclusion is that HTTP 1.1 requires
the 'Host' request header, so if it's missing (or possibly if it's an IP
address, or if it's not one of the hosts the server has been configured
to handle), then... error document.
If this works with any browser, then it _might_ be that the browser is
being clever, doing a reverse lookup of the IP address, and sending the
result as the 'Host' request header. In that case, a bit of tcpdump
Apologies if this is obvious, but if this isn't the problem, you might
need to elaborate.
Norman Gray : http://www.astro.gla.ac.uk/users/norman/it/
Research IT Coordinator
SUPA School of Physics and Astronomy, University of Glasgow, UK
Charity number SC004401
More information about the freebsd-questions