Hi,

I have come across an interesting problem when pebble is deployed behind a
reverse proxy (e.g. nginx).

If I log in to my blog and post a comment, then 127.0.0.1 is added to the
whitelist, because pebble sees the request coming from localhost (the
reverse proxy) rather than from the internet.  That then opens up my blog
for anyone in the world to create a comment, because when they do, it too
is viewed as coming from localhost, which is now on the whitelist :-)

Either I have nginx setup wrong, and it should be passing pebble the
outside IP address (help please?) or this is a bug/feature-request in
pebble.

Has anyone else had this problem? I using Pebble 2.4.

Thanks,
Ant
------------------------------------------------------------------------------
_______________________________________________
Pebble-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/pebble-user

Reply via email to