https://issues.apache.org/bugzilla/show_bug.cgi?id=50453
--- Comment #6 from Jim Riggs <j...@riggs.me> 2010-12-10 16:48:05 EST --- (In reply to comment #4) > So, should the RemoteIPValve/Filter should be looking at the first > X-Forwarded-For (A) or the last X-Forwarded-For (E) address? Chris - It should be looking at them as if they were combined in a single comma-separated list and evaluating them from right-to-left. As Mark said, regardless of how the header(s) are received, it should be treated as "X-Forwarded-For: A, B, C, D, E" and RemoteIP should "trust" them in the order E - D - C - B - A. I will make sure that the switch to getHeaders() in my patch does this. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
