https://issues.apache.org/bugzilla/show_bug.cgi?id=55635
William A. Rowe Jr. <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |RESOLVED Resolution|--- |INVALID --- Comment #4 from William A. Rowe Jr. <[email protected]> --- You have made a claim in comment #1 that... access_log.2013.10.07: ivoronin.net.billing.ru 87.245.198.54 172.20.106.70 1.1.1.2, 1.1.1.1 - - [07/Oct/2013:12:44:00 +0400] "GET" "GET /test/1.xml HTTP/1.1&" "&" 403 212 "-" "Apache-HttpClient/4.1.2 (java 1.5)" pid=27844 tid=140346537215744 time_ms=3111 is inaccurate. It is the correct result. The processed request is presented by the IP 87.245.198.54, which claims it is forwarding for 1.1.1.2, 1.1.1.1 while the internal proxy 172.20.106.70 and trusted extranet proxy 87.250.250.203 are both 'erased' from the x-forwarded-for and apparent IP address of the req (except as presented by the connection's IP address). The 1.1.1.2 and 1.1.1.1 IP addresses are not presented as the user-agent's IP address *because* the 87.245.198.54 host is *not* trusted. An IP address would never simultaniously appear to be the user agent's IP addr while also appearing in the X-Forwarded-For list. Such combinations make no sense. This behavior is by design. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
