External access to GSA web interface using any --allow-header-host

Greenbone Professional Edition
1

How can I allow external access to GSA web interface using any host header?

In this file : /lib/systemd/system/greenbone-security-assistant.service

there is --allow-header-host option. but I can only give an IP or hostname.

2

This setting is required to avoid host header poisoning. You must always set that option.

3 Likes