Hello,

I sometimes get Requests with x-forwarded-for Headers like
1st IP, 2nd IP or even unknown, 1st IP

What do they mean? Is pound collecting requests and sending them in 
bulk? This is really an issue because of session tracking and logging.

What can I do to avoid this?

Thanks in advance,
Oliver

This occurs if multiple proxy servers are encountered on the route from 
the client to your server.

For example, the user may be accessing the Internet through a proxy 
server, which will add one IP to the X-Forwarded-For header, then the 
request will go through Pound which will add another IP to the header.

HTH

Regards,

-------------------------------------------------------------------
Andrew Taylor | Technical Architect
Corporate IT | Rentokil Initial Plc
-------------------------------------------------------------------
Email: andrew.taylor(at)rentokil-initial.com | Tel: +44 (0)1293 858076
-------------------------------------------------------------------

Oliver Hankeln wrote:[...]

Thank you very much!

So I simply have to remove the X-forwarded-for header and that's it?
I will test that tomorrow!

Regards,
Oliver


Andrew Taylor schrieb:[...][...][...]

[...]

If you remove the X-forwarded-for header, you will have no way to track the
IP your clients are coming from.
If you edit http.c in the source code, find the line that has the following:
BIO_printf(be, "X-Forwarded-For: %s\r\n", inet_ntoa(from_host));
And add the line below after it:
BIO_printf(be, "REAL_REMOTE_ADDR: %s\r\n", inet_ntoa(from_host));
Pound will add another header which has the address it is forwarding for,
rather than add to the X-Forwarded-For.
You can then use the following in your apache log settings:
LogFormat "%{REAL_REMOTE_ADDR}i %A %t \"%r\" %>s %b \"%{Referer}i\"
\"%{User-Agent}i\"" combined


-----Original Message-----
From: Oliver Hankeln [mailto:ohap(at)netzmarkt.de] 
Sent: Thursday, 23 November 2006 10:00 PM
To: pound(at)apsis.ch
Subject: Re: [Pound Mailing List] Problem with x-forwarded-for

Thank you very much!

So I simply have to remove the X-forwarded-for header and that's it?
I will test that tomorrow!

Regards,
Oliver


Andrew Taylor schrieb:[...][...][...]

[...]