The http multi-host check command enables detection of HTTP packets with multiple Host fields.
The undo http multi-host check command disables detection of HTTP packets with multiple Host fields.
http multi-host check action { alert | block }
undo http multi-host check
action
Specifies the action.
-
alert
When an HTTP packet contains multiple Host fields, the packet is permitted, and a log is recorded.
block
When an HTTP packet contains multiple Host fields, the packet is blocked, and a log is recorded.
Intrusion prevention profile view
2: Configuration level
By default, this function is disabled.
# In IPS profile profile1, enable detection of HTTP packets with multiple Host fields and set the action to block.
<sysname> system-view [sysname] profile type ips name profile1 [sysname-profile-ips-profile1] http multi-host check action block