Sorry to reply to my own email - but as an extension of this would it be feasible to have a hdr_src option for use in in the same manner as using the src option that supports matching if an IP is in a range (only with hdr_src the IP would be contained in a header).

Chris

Chris Sarginson wrote:
Hi guys,

Is there a limit on the amount of infomation you can put as part of an
acl? I want to do the following:

acl ip_ssl_block_72 hdr_reg(X-Real-IP) 10.10.10.10

but keep just expanding the list of IPs in there (they are pulled from a
backend database we have and inserted in). I'm using the header as
traffic is being proxied across from nginx which is answering SSL
connections.

Chris


Reply via email to