Iñaki Baz Castillo wrote:
El Jueves, 22 de Octubre de 2009, Jacques Caron escribió:
At 16:08 22/10/2009, Eric B. wrote:
1) There is no way to know the exact sequence of the headers.
As already pointed out by Dave, the HTTP RFC explicitly says that
header: a
header: b

is exactly equivalent to:
header: a,b

So the sequence is perfectly defined.

The problem is that X-Forwarded-For definitios is exactly the opposite.

I still don't see how pound is doing things wrong here.  If it gets a
request like:

X-Forwarded-For: client1, proxy1

and then the header sent to the backend is:

X-Forwarded-For: client1, proxy1
X-Forwarded-For: proxy2

then that is correct based on the reconstruction rules cited previously
and the definition here:

http://en.wikipedia.org/wiki/X-Forwarded-For

Is pound doing something other than what I've described above?

Regards,
--
Dave Steinberg
http://www.geekisp.com/
http://www.steinbergcomputing.com/

--
To unsubscribe send an email with subject unsubscribe to [email protected].
Please contact [email protected] for questions.

Reply via email to