Questions tagged [x-forwarded-for]

HTTP header field for identifying the origin IP address

Filter by
Sorted by
Tagged with
0
votes
0answers
17 views

Can't get Public IP of Inbound Connections from Behind NAT + Reverse Proxies

My network flow looks like this: Public Client ∟--> CDN Reverse Proxy (Cloudflare) - ONLY used for HTTP/S traffic, all else goes direct ∟--> Cloud Server w/ firewalld forwarding ...
0
votes
0answers
99 views

How to block HTTPS to IP with iptables and Fail2Ban using X-Forwarded-For

We have an AWS EC2 instance running behind a standard ELB load balancer. Is it possible for iptables to block HTTPS access from certain IPs, using the X-Forwarded-For IP address header info? This rule ...
1
vote
1answer
131 views

Apache won't record X-Forwarded-For

I am trying to record the a client ip stored in the X-Forwarded-For http header in the Apache access logs but having no luck and have been pulling my hair out for hours. I've tried a ton of different ...
0
votes
1answer
134 views

Show upstream Cloudflare server IP after enabled nginx / set_real_ip_from

I've followed cloudflare doc [1] that enabled set_real_ip_from in order to show original client's IP My log format is log_format main '$remote_addr $http_cf_connecting_ip $http_x_forwarded_for ...
0
votes
0answers
35 views

CSF not blocking traffic from reverse proxy

I am using following architecture Public <> Nginx reverse proxy <> APACHE+CSF I already managed dynamic blocking of end users IP using mod_remoteip But even when end user IP is blocked in ...
2
votes
0answers
79 views

Stop a user from circumventing IP block?

A user is somehow avoiding an IP block in apache 2.2/2.4, and I can not figure out how. The company I work for hosts hundreds of sites in different datacenters; this user is attacking several of the ...
1
vote
0answers
21 views

Does in-the-field experience suggest that a HTTP POST is more reliable than PUT and DELETE

I need to cross reference my experience with that of professionals, as I'm developing a REST application that can either Use on HTTP POST for all delete and create operations Or use HTTP DELETE and ...
2
votes
1answer
336 views

Using Nginx real_ip when you don't know the intermediate proxy IP addresses

Nginx's real_ip module allows you to set the $remote_addr variable based on values sent in particular header fields. It has a special understanding of the X-Forwarded-For header, and is able to use ...
1
vote
0answers
130 views

Correct log format dependent on route

I have a few virtual hosts running on a server, a couple are through a CDN and have X-Forward-For added to the headesr, sometimes it just goes through a load balancer where RemoteIPHeader is added. I ...
0
votes
0answers
151 views

HaProxy X-Forwered-For sends when already present incoming request

I'm trying to get X-Forwarded-For when original client request contains that header and pass it to the application layer in using HAProxy. any help will be appreciated.
-1
votes
1answer
911 views

Can squid add X-Forworded-For header in https request?

I know squid can perform as a mitm,so I want to know can squid add X-Forworded-For header in https request? If can add, how to configure it?
1
vote
0answers
1k views

Apache 2.4 X-Forwarded-For for remoteip

I configured apache 2.4 with following file /etc/apache2/conf-available/remoteip.conf RemoteIPHeader X-Forwarded-For RemoteIPTrustedProxy 127.0.0.1 But It will not include header in tomcat. ...
4
votes
2answers
3k views

Private address space IP found in X-Forwarded-For

I'm reverse proxying with nginx behind Google Cloud (HTTPS) Load Balancer, so I add the X-Forwarded-For header so that the backend can extract the client (browser) IP. This morning I noticed a 10.x....
3
votes
1answer
6k views

Possible to log X-FORWARDED-FOR to nginx error_log?

Nginx allows custom log formats for access logs -- right now I'm logging http_x_forwarded_for and it's working fine. The problem is my error log only shows the LB IP. After Googling and reading ...
0
votes
1answer
2k views

X-Forward-Proto custom header

I am leveraging AWS ALB & My setup is as follows : ALB]--HTTPS--[NGINX]--HTTP--[ALB]--HTTP--[APP/NGINX] the problem is I am using NGINX to forward X-Forwarded-Proto=https to the application ...
1
vote
0answers
187 views

Restore original visitor IP for static site on AWS S3 using Cloudflare

I've a static site on S3, with cloudflare as my DNS provider. The server logs are collected in an S3 bucket. However the visitor IP address in the log files points to cloudflare servers instead of the ...
2
votes
1answer
2k views

prevent X-Forwarded-For spoofing in haproxy

Yesterday we got hit by a DDoS attack reaching our webserver backends (apache2). The frontend consists of haproxy loadbalancing connections to the webservers. On access.log of apache we saw thousands ...
0
votes
1answer
458 views

how to block external request coming from proxy server to nginx webserver

I have web application hosted in nginx web server. I would like to disable request from any proxy server to my webserver (nginx) . I need to return 403 for those who request via proxy server. Is ...
0
votes
1answer
255 views

Get client IP from Web application via Load-Balancer alternative

If a Web application server (ex. nginx&php-fpm) is behind Load-Balancer such as AWS-ELB: Client -> Load-Balancer -> Web Application server To get the real client IP from Web application ...
3
votes
1answer
1k views

Pass Client IP from AWS ELB to HA Proxy

We have a issue in our application where the client IP is not getting passed to the App servers in the following setup. USER---------> AWS ELB -----------> HAPROXY -----------> Application server(...
1
vote
2answers
2k views

Getting X-Forwarded behind AWS TCP Load Balancer for https

I have an AWS TCP load balancer on an autoscaling pool, There are multiple domains behind it so I can't do SSL termination on the load balancer, hence TCP. I've updating my logging format to log the ...
1
vote
2answers
1k views

Logging original requestor IP instead of forward proxy IP for certain HTTP requests (nginx logs)

I use nginx as a reverse proxy in front of our application web server (gunicorn; it's a Django app). Majority of the users hitting this web application are actually routed through a forward proxy. ...
4
votes
3answers
25k views

Forwarding real remote IP to proxied server with nginx

To hide my website IP I proxied the main server with nginx on another VPS. I am trying to send the visitor real IP to my website and here is my config in conf.d folder: proxy_cache_path /etc/nginx/...
3
votes
1answer
3k views

Check Varnish ACL via X-Forwarded-For when behind one or more(!) reverse proxies

I have Varnish running behind a reverse proxy (running on localhost, for SSL offloading). The proxy sets the X-Forwarded-For header or adds itself to it if the header already exists. When I do ACL ...
3
votes
1answer
1k views

Configuring nginx to log original requestor IP (instead of IP of forward proxy)

On an nginx-enabled website I maintain, some visitors are behind a certain forward proxy. Since requests pass through the proxy's servers, the HTTP Request IP address in these cases is always from ...
1
vote
1answer
1k views

X-forwarded-for NULL in Tomcat

We are injecting the x-forwarded-for header in the loadbalancer, which sends the request to apache web server, which inturn proxys (mod_proxy_balancer) the request to the backend tomcat server. we are ...
0
votes
2answers
3k views

Blacklist IPs with iptables behind a Reverse Proxy

I have a Ubuntu Server 16 and I use iptables as firewall. HTTP and HTTPS traffic is behind a Reverse Proxy that I cannot control, but I have X-Forwarded-For field activated. Is it possible to filter ...
0
votes
1answer
578 views

Duplicate IP in Apache access log behind nginx proxy

I've recently inherited an infrastructure where all the users go through an AWS ELB -> nginx proxy -> AWS ELB -> Apache. The problem I'm seeing is that the client's IP is showing twice in Apache, a ...
2
votes
0answers
166 views

HAProxy, why would a replaced HTTP header have a number at the end?

Can someone explain what the "X-Forwarded-Proto2" header is in this HAProxy frontend stanza?: frontend main *:443 ... reqirep ^(X-Forwarded-Proto:)(.*) X-Forwarded-Proto2:\2 ... I understand ...
1
vote
1answer
9k views

Get client IP with Header add in Apache2

I am attempting to get the client IP in a HTTP header. I have seen a lot of references to getting this in Logs however i dont know how this translates to passing it as a header. I was going to use ...
1
vote
0answers
6k views

Apache proxy server not passing X-Forwarded-For

I am migrating some sites from one server to another. To avoid any downtime, I am proxying moved sites through the old server while the DNS updates. On the original (proxy) server, I have the ...
0
votes
1answer
1k views

Is there a local “firewall” to block by “X-Forwarded-For” IPs behind the reverse proxies?

The situation is quite typical. I'm using CentOS + Apache(s) behind a Load-balancer for the WebSites. At this point, let's assume i don't have any access to the Load-balancer (or) let's forget about ...
0
votes
1answer
1k views

IIS server farm with ARR: Why does HTTP_X_FORWARDED_FOR have a port number?

I've got a server farm set up in IIS 8.5. When I inspect the HTTP_X_FORWARDED_FOR header in my application code, it gives me the correct IP address but it contains a colon and a port number. E.g. ...
9
votes
1answer
16k views

How to log original value of $remote_addr when using Real-IP

My environment has user requests passing through a number of systems: [Client] --> [ELB] ---> [nginx] --> [web] (ELB = AWS Elastic Load Balancer) Thanks to this answer, I have nginx determining and ...
4
votes
1answer
10k views

Add haproxy X-Forwarded-Host request header

I have a Haproxy instance that rewrites Host headers to internal ones using http-request set-header. http-request set-header Host internal.example However, I'd still like backends to have access to ...
-1
votes
1answer
1k views

How to implement X-Forwarded-For to see header in web page

I am wanting to implement X-Forwarded-For so that when a user visits a site the actual IP is registered. So far I have added the following to my apache.conf file on my load balancer: LogFormat "%h %l ...
0
votes
1answer
2k views

mod_security behind reverse proxy and clients IP

client -> haproxy -> mod_security boxes -> backends Problem: mod_security boxes use mod_rpaf with ip of haproxy in 'RPAFproxy_ips'. Apache logging shows clients real ip but mod_security ...
2
votes
1answer
2k views

Apache HTTPD's remoteip not working

I've configured remoteip and checked that it's actually loaded. The remoteip.conf is loaded as well. I checked the latter by introducing a wrongly formatted IP in the following (correct) config: ...
4
votes
1answer
4k views

is there a standard for chaining x-forwarded-for headers?

IETF RFC 2616 Section 4.2 allows a request to contain multiple headers with the same field-name as long as chronological order of insertion is preserved and their values can be converted into single ...
0
votes
1answer
64 views

AWS forward request between private instances

I have a public subnet holding AWS ELB which forward its requests to a private EC2 instance. Is there a way I can forward the request from my private EC2 request to another private EC2 instance? In ...
1
vote
1answer
649 views

Allowing multiple IPs behind ELB in Apache configuration

I have multiple application servers running as EC2 instances. Only certain bare-metal servers running elsewhere are allowed to contact them and their IPs whitelisted explicitly in the httpd.conf @the ...
9
votes
2answers
24k views

Apache mod_remoteip and access logs

Since Apache 2.4 I've started using mod_remoteip instead of mod_extract_forwarded for rewriting client address from x-forwarded-for provided by frontend servers (varnish, squid, apache etc). So far ...
3
votes
1answer
2k views

Location based whitelisting of IP's on nginx webservers behind Elastic Load Balancer

I run nginx webservers behind an elastic load balancer in AWS. The real IP is got through X-Forwarded-For. The issue faced is how to use this to deny all and whitelist only specific sources for ...
1
vote
1answer
1k views

Nginx not getting the real visitor IP in server block

I am using a loadbalancer in my current setup, requests come from ip 10.71.128.13. I am using Nginx as a front to a Gunicorn backend. I want to get the real IP address of the visitor and log it (not ...
1
vote
1answer
8k views

apache forward REMOTE_USER to X-Forwarded-User

I would like to pass the environment variable REMOTE_USER set by apache when HTTP basic authentication is correct to a backend. This would provide authentication to the backend server as well. Here ...
1
vote
2answers
1k views

Fail2ban and X-Forwarded

I am configuring fail2ban on my webservers. My Webservers are behind ELB. so I configured X-forwarded to get the real IP's in Apache Access logs.But unfortunately fail2ban not able scan accesslogs ...
1
vote
2answers
3k views

Squid: disable X-Forwarded-For, but only for specific ACLs

I know, that I can turn off X-Forwarded-For header in Squid completley by using directive "forwarded_for off" or "forwarded_for delete" globally. I would like to be able to disable that header only ...
1
vote
1answer
6k views

Logging X-Forwarded-For IP in Shibboleth's Audit Logs

This is a follow up from my earlier question on capturing the X-Forwarded-For IP address in across multiple proxies. Now, I'm looking to capture the Client's IP in the application's (Shibboleth's IdP) ...
3
votes
1answer
5k views

Amazon ELB not Passing “X-Forwarded-For” to IIS

ELB is setup to accept public HTTPS (443) connections and send them on as HTTP (80) to the EC2 instances. The EC2 instances run an IIS app that needs to know the user's IP address. According to ...
2
votes
2answers
9k views

X-Forwarded-For not showing up in tomcat7 access log

I'm trying to print out the remote client IP on a tomcat running behind an ELB and for some reason it's not being printed out to the access log. my elb configuartion is : 80 -> 8080 443 -> 8080 ...