>I've been using the following at the top of my httpd.conf for a while 
>now and it seems to be working fine:
>
>server "default" {
>        listen on * port 80
>         block return 400
>}
>
>This should also prevent httpd from wasting cycles looking for 
>non-existent locations on the filesystem.

As just a regular user of httpd, this does seem to be a simple enough solution, 
and an explicit example in the docs could help others understand it as 
mentioned earlier.

Another option, which involves work, is to create a root option that defines 
how httpd processes Host headers or lack thereof (i.e. strict vs non-strict). 
If this were to be disabled by default, then it'd probably help avoid breakage. 
I am not skilled enough to submit a diff for this, so I will settle with the 
first option.

Reply via email to