https://bz.apache.org/bugzilla/show_bug.cgi?id=63113
William A. Rowe Jr. <wr...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |INVALID
Status|NEW |RESOLVED
--- Comment #10 from William A. Rowe Jr. <wr...@apache.org> ---
You can't *usefully* decipher XFF private addresses across networks.
{private subnet} -> {public addressing} -> {private subnet} gives you
zero useful information about the private subnet on the other side of
the public zone.
I'm guessing you have several 10. proxies (the ngnix you mentioned)
on your side of the zone that are not deciphered?
RemoteIPInternalProxy 127.0.0.1/8
will obviously not trust any 10. addresses as part of your internal
network. You need to expand the list of RemoteIPInternalProxy links
to include all internal proxies.
I'm marking as resolved since this was a configuration question in
the first place, it belongs on us...@httpd.apache.org, this issue
tracker is strictly for reporting defects in ASF source code.
See http://httpd.apache.org/lists.html#http-users for obtaining peer
help with configuration.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org
