Hi KFCI,

> Is there any way I can get pound/apache to send/receive (respectively)
> the originators IP address so all scripts also see the originators IP
> address?

We're successfully using mod_rpaf for Apache here:

https://github.com/gnif/mod_rpaf

We have Apache running on Port 81, and Pound on 80 + 443. Our Pound
configuration includes:

ListenHTTP
  ...
  AddHeader "X-Forwarded-Port: 80"

ListenHTTPS
  ...
  AddHeader "X-Forwarded-HTTPS: on"
  AddHeader "X-Forwarded-Port: 443"

Our mod_rpaf configuration looks like this:

RPAF_Enable       On
RPAF_ProxyIPs     127.0.0.1
RPAF_Header       X-Forwarded-For
RPAF_SetHostName  On
RPAF_SetHTTPS     On
RPAF_SetPort      On

mod_rpaf happily provides the client's original IP, the HTTPS setting
(only the environment variable; it does NOT have any influence on
%{HTTPS} in mod_rewrite which uses a mod_ssl function to determine the
value of that variable, so you need to use %{ENV:HTTPS} instead) and the
port the client originally connected to.

The setup works in a shared hosting setup for some thousand different
sites for over a year; with no problems.

Jonas

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to