You are reading a single comment by @Velocio and its replies. Click here to read the full conversation.
  • I think I've fixed it Earthloop.

    The problem is the X-Forwarded-For header, there's an assumption somewhere in either vBulletin, PHP or one of the Apache modules that the client IP address is in that header.

    Not a bad assumption, but it assumes that the value is a single IP address and not a list. When it's a comma delimited list the standard is that the first IP is the client and subsequent ones are proxies, but I believe that some piece of code is just truncating the list to the last value and using that.

    So that the last value on the list is being used, the local proxy.

    I've switched a lot of my config to use http.X-Real-IP instead, and explicitly set that at the edge of the network.

    I believe... that it is now working.

About

Avatar for Velocio @Velocio started