[Zope-Coders] Re: [ZC] 360/ 3 Assign "Zope should issue a 4xx on proxy attacks"

[Toby Dickenson]

On Tuesday 23 Apr 2002 4:52 pm, Lennart Regebro wrote:
>Yup. For example, when using a VHM, it should be set up allow the hosts
>mentioned there, but no others.

When using VHM it should be checking that the request hostname matches the 
name(s) of one of the backend servers. It should leave the virtual host names 
alone.

This is addressed in the Fishbowl Wiki

http://dev.zope.org/Wikis/DevSite/Proposals/KnowYourHostName