On Sun, Feb 19, 2012 at 10:01 PM, Matti Aarnio <[email protected]>wrote:
> On 02/19/2012 08:29 PM, Bashar wrote:Being not a Zope expert this could be > a hard task to me > ... > > I'm upgrading now, but there is no feature in pound that would make the > original IP forwards to zope? > > > > Thanks > > Apparently the method for this is similar to many other systems - same > problem, alike approaches: > > zope.conf: > > # Directive: trusted-proxy > # > # Description: > # Define one or more 'trusted-proxies' directives, each of which is a > # hostname or an IP address. The set of definitions comprises a list > # of front-end proxies that are trusted to supply an accurate > # X-Forwarded-For header to Zope. If a connection comes from > # a trusted proxy, Zope will trust any X-Forwarded header to contain > # the user's real IP address for the purposes of address-based > # authentication restriction. > # > # Default: unset > # > # Example: > # > # trusted-proxy www.example.com > # trusted-proxy 192.168.1.1 > > I've added trusted-proxy 111.222.333.444 , restarted zope , but it didn't work still shows 111.222.333.444 in Z2.log > utfg: zope x-forwarded-for > what does this mean? didnt get you
