How do the advanced HTTP header anti-reconnaissance options in ServerMask work?
ServerMask now provides a number of advanced server anonymization features that will help to mask IIS from more detail-oriented and knowledgeable hackers. The default settings for these features are designed to be compatible with the great majority of Web sites and applications, but please review each advanced feature before enabling them on a production Web server. Let’s take a look at ServerMask’s advanced features • Mask internal IP addresses with FQDN in Content-Location header: For requests to directories with mapped default pages or when content is served from computers on the network but not on the IIS server that is handling the initial request, the internal IP address location of that content is printed in the HTTP Content-Location header when IIS serves the response. When this option is checked and enabled, ServerMask will attempt to replace these internal, perhaps sensitive, IP addresses with the Fully Qualified Domain Name (FQDN) or the host name for the site for which IIS
