https://issues.apache.org/bugzilla/show_bug.cgi?id=47601





--- Comment #2 from [email protected]  2009-07-30 03:08:32 PST ---
"Prevents" may not have been exactly the right word, but it seems like we agree
on what Apache does now and what it should be able to do.  My hope is that
there can be a configuration option just like ProxyVia for managing XFF (with
on/off/block capability).

Also, the current XFF code in mod_proxy_http does not seem to have the correct
behaviour when the request already had an XFF (multiple proxies between the
client and server).  The XFF format is:

X-Forwarded-For: original-client, first-proxy, second-proxy, etc.

If I interpret the code correctly, the mod_proxy_http XFF implementation (for
reverse proxies) assumes that the current instance is the only proxy, as does
the RequestHeader suggestion.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to