https://issues.apache.org/bugzilla/show_bug.cgi?id=55635

William A. Rowe Jr. <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEEDINFO                    |RESOLVED
         Resolution|---                         |INVALID

--- Comment #4 from William A. Rowe Jr. <[email protected]> ---
You have made a claim in comment #1 that...

access_log.2013.10.07:
ivoronin.net.billing.ru 87.245.198.54 172.20.106.70 1.1.1.2, 1.1.1.1 - -
[07/Oct/2013:12:44:00 +0400] "GET" "GET /test/1.xml HTTP/1.1&" "&" 403 212 "-"
"Apache-HttpClient/4.1.2 (java 1.5)" pid=27844 tid=140346537215744 time_ms=3111

is inaccurate.  It is the correct result.  The processed request is presented 
by the IP 87.245.198.54, which claims it is forwarding for 1.1.1.2, 1.1.1.1
while the internal proxy 172.20.106.70 and trusted extranet proxy
87.250.250.203
are both 'erased' from the x-forwarded-for and apparent IP address of the req
(except as presented by the connection's IP address).

The 1.1.1.2 and 1.1.1.1 IP addresses are not presented as the user-agent's IP
address *because* the 87.245.198.54 host is *not* trusted.

An IP address would never simultaniously appear to be the user agent's IP addr
while also appearing in the X-Forwarded-For list.  Such combinations make no
sense.

This behavior is by design.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to