Hey,

I think there is a typo in relayd.conf(5).

X-Forwarded-By should be the server $SERVER_ADDR instead of the client
$REMOTE_ADDR.

X-Forwarded-For is the client (correct).

diff --git a/usr.sbin/relayd/relayd.conf.5 b/usr.sbin/relayd/relayd.conf.5
index 8bed93efa1f..5f3eb0b2f9a 100644
--- a/usr.sbin/relayd/relayd.conf.5
+++ b/usr.sbin/relayd/relayd.conf.5
@@ -1470,7 +1470,7 @@ http protocol "https" {
        match header append "X-Forwarded-For" \e
                value "$REMOTE_ADDR"
        match header append "X-Forwarded-By" \e
-               value "$REMOTE_ADDR:$SERVER_PORT"
+               value "$SERVER_ADDR:$SERVER_PORT"
        match header set "Keep-Alive" value "$TIMEOUT"
 
        match query hash "sessid"

-- 
Kind regards,
Hiltjo

Reply via email to