> > I just found out that they also send an CF-Connecting-IP header. Is > > there a way to copy the contents of this header to the X-Forwarded-For > > header? > > Yes, just remove x-forwarded-for and rename cf-connecting-ip to > x-forwarded-for :-) > > Willy
But remember that cf-connecting-ip can be spoofed as easily as x-forwarded-for. You will need to check the cloudflare ips somehow and you can do this with with the 2 proposals from my previous mail. Regards, Lukas
