3 ms·
> and never have more than one address That’s important if you don’t control all the systems. Back to there being no rules some systems prepend addresses at ea
by leetrout 7y ago
> and never have more than one address
That’s important if you don’t control all the systems. Back to there being no rules some systems prepend addresses at each layer and some append them. And if you don’t know or don’t control the behavior at each layer it’s useless IP soup. I’ve not dealt with that in a long while but your comment brought back memories.
- pas 7y agoTo solve the append/prepend dilemma there's also X-Real-IP too. (At least the Nginx module does this.) So basically just log the x-f-f and use the other one as the real client IP. Of course, if you don't control the layers, then probably you should consider those headers invalid for an incoming request. (Though for email there's ARC to sign the added headers, maybe if someone really wants to provide at least marginally accountable HTTP proxies, they can use something like that.)