Re: mod_remoteip DNS address resolution

2016-08-04 Thread Rainer Jung
Am 04.08.2016 um 17:46 schrieb Yann Ylavic: On Thu, Aug 4, 2016 at 3:30 PM, Rainer Jung wrote: - apr_ipsubnet_create() has some logic, that for instance accepts "192.168" as input with NULL mask_or_numbits and returns sub 192.168.0.0 and mask 255.255.0.0. Hmm,

Re: mod_remoteip DNS address resolution

2016-08-04 Thread Yann Ylavic
On Thu, Aug 4, 2016 at 3:30 PM, Rainer Jung wrote: > > - apr_ipsubnet_create() has some logic, that for instance accepts "192.168" > as input with NULL mask_or_numbits and returns sub 192.168.0.0 and mask > 255.255.0.0. Hmm, indeed, but this looks buggy to me. Shouldn't

Re: mod_remoteip DNS address resolution

2016-08-04 Thread Rainer Jung
Am 04.08.2016 um 13:36 schrieb Yann Ylavic: On Thu, Aug 4, 2016 at 10:14 AM, Rainer Jung wrote: Something like "RemoteIPLookups (On|Off|NNN)". "On" would be current behavior, "Off" would be "No DNS and use connection IP if address is invalid", "NNN" would be "No DNS

Re: mod_remoteip DNS address resolution

2016-08-04 Thread Yann Ylavic
On Thu, Aug 4, 2016 at 10:14 AM, Rainer Jung wrote: > > Something like "RemoteIPLookups (On|Off|NNN)". "On" would be current > behavior, "Off" would be "No DNS and use connection IP if address is > invalid", "NNN" would be "No DNS and return status NNN if address is >

mod_remoteip DNS address resolution

2016-08-04 Thread Rainer Jung
Hi there, I learned that mod_remoteip does IP address resolution including DNS when it processes a token from the configured RemoteIPHeader. In the observed case, two different customers using F5 load balancers had a numeric IP address in the header which was followed without white space or