Re: Stonehenge::Throttle, round 2 - CPU used by an IP

[Ask Bjoern Hansen]

On Tue, 16 Nov 1999, Matt Sergeant wrote:

> For the unique IP in _most_ firewall cases, take the last comma separated
> value of the X-Forwarded-For header: $r->headers_in->get('x-forwarded-for');

except for all the clients at 192.168.1.100 (etc).

So you would have to get into "real ip / forwarded for" pairs, and the
harmful stupid people would at some point figure that out and put random
"forwarded for" thingies into their clients. Don't use anything but the
real ip for anything related to access policies based on ip addresses.


 - ask

-- 
ask bjoern hansen - <http://www.netcetera.dk/~ask/>
more than 60M impressions per day, <http://valueclick.com>