Differences

This shows you the differences between two versions of the page.

--- pfsense:suricata:alerts:suricata_http_host_header_invalid [2021/01/15 09:27] – [PFSense - Suricata - Alerts - SURICATA HTTP Host header invalid] peter
+++ pfsense:suricata:alerts:suricata_http_host_header_invalid [2021/01/15 09:29] (current) – [PFSense - Suricata - Alerts - SURICATA HTTP Host header invalid] peter
@@ Line 1: / Line 1: @@
 ====== PFSense - Suricata - Alerts - SURICATA HTTP Host header invalid ======
-[[https://tools.ietf.org/html/rfc6066|RFC 6066]] doesn't specify or even recommend any particular HTTP error in the case that the hostname sent via SNI (Server Name Indication) doesn't match the HTTP Host header.
+A client sent a bad hostname (or none at all) through SNI or the HTTP Host header.
+----
+[[https://tools.ietf.org/html/rfc6066|RFC 6066]] does not specify or even recommend any particular HTTP error in the case that the hostname sent via SNI (Server Name Indication) doesn't match the HTTP Host header.
 It does recommend that the server abort the TLS handshake if the SNI hostname is not one that it provides service for.