starred/nginx-proxy-manager-NginxProxyManager

Fork 0

mirror of https://github.com/NginxProxyManager/nginx-proxy-manager.git synced 2026-04-25 17:35:52 +03:00

[GH-ISSUE #3246] Add an option to reject or drop a request with an unknown host #2191

New issue

Closed

opened 2026-02-26 07:34:26 +03:00 by kerem · 2 comments

kerem commented

2026-02-26 07:34:26 +03:00

Owner

Originally created by @ondrejnedoma on GitHub (Oct 7, 2023).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/3246

Is your feature request related to a problem? Please describe.

This is a security concern of mine, where if someone opens ANY domain pointing to my IP address with an A record, or the IP address itself, it would at best throw a 404 page if I set that up in the settings, and at worst show the congrats page.

Describe the solution you'd like

It would be a great feature if besides choosing congrats page, 404 page, redirection, or custom page, I could also choose to reject or drop the request entirely, giving the attacker a lot less hope.

Describe alternatives you've considered

Additional context

Originally created by @ondrejnedoma on GitHub (Oct 7, 2023). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/3246  **Is your feature request related to a problem? Please describe.**  This is a security concern of mine, where if someone opens ANY domain pointing to my IP address with an A record, or the IP address itself, it would at best throw a 404 page if I set that up in the settings, and at worst show the congrats page. **Describe the solution you'd like**  It would be a great feature if besides choosing congrats page, 404 page, redirection, or custom page, I could also choose to reject or drop the request entirely, giving the attacker a lot less hope. **Describe alternatives you've considered**  **Additional context**

kerem

2026-02-26 07:34:26 +03:00

closed this issue
added the
enhancement
label

kerem commented

2026-02-26 07:34:27 +03:00

Author

Owner

@FibreTTP commented on GitHub (Oct 8, 2023):

This is was already implemented in https://github.com/NginxProxyManager/nginx-proxy-manager/pull/2942:

https://nginx.org/en/docs/http/request_processing.html#how_to_prevent_undefined_server_names

@FibreTTP commented on GitHub (Oct 8, 2023): This is was already implemented in https://github.com/NginxProxyManager/nginx-proxy-manager/pull/2942: ![firefox_2tUvsQ0ozu](https://github.com/NginxProxyManager/nginx-proxy-manager/assets/120446961/cec391dd-a185-421d-8753-96b5459543e7) https://nginx.org/en/docs/http/request_processing.html#how_to_prevent_undefined_server_names

kerem commented

2026-02-26 07:34:27 +03:00

Author

Owner

@ondrejnedoma commented on GitHub (Oct 10, 2023):

Oh, I was running almost a year old version of NPM, after updating I see the option, Thanks!

@ondrejnedoma commented on GitHub (Oct 10, 2023): Oh, I was running almost a year old version of NPM, after updating I see the option, Thanks!

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/nginx-proxy-manager-NginxProxyManager#2191

No description provided.

Rows
Columns