Forum Discussion
boneyard
Nov 27, 2017MVP
If im not mistaken the request for host:xxx will have a host header with the :xxx port behind the hostname. so check [HTTP::host] and if it isn't empty or :80 then you have something to block on right?
If im not mistaken the request for host:xxx will have a host header with the :xxx port behind the hostname. so check [HTTP::host] and if it isn't empty or :80 then you have something to block on right?