On 9/12/2019 2:58 PM, Rothlisberger, John R. wrote:
That worked for debugging - can at least see where the error is coming from:
76996 2019-09-12 22:42:29.566819 - checking if referer is OK (http_referer: https://our.domain.com/xymon-seccgi/enadis.sh, http_host: 10.20.30.40, xymonwebhost: https://our.domain.com, checkstr: /xymon-seccgi/enadis
76996 2019-09-12 22:42:29.566832 Disallowed request due to unexpected referer 'our.domain.com/xymon-seccgi/enadis.sh', wanted '10.20.30.40/xymon-seccgi/enadis' (originally '/xymon-seccgi/enadis')
http_host is the IP of the Xymon server - but not the same as the URL used for our system (we have several and use a reverse proxy to get to all of them).
Without taking too many wild guesses at which setting defines http_host (can't find it in man pages) - how do I change that?
HTTP_HOST is actually going to be set by the client. However the check can be overridden by setting $XYMONSERVERWWWNAME (technically $XYMONWEBHOST is what's used) in xymonserver.cfg to what you're expecting the client to be using.
Depending on current .cfg settings, something may be specifying the basic IP there.
HTH,
-jc