Hi, the attack header should be available in v_b_r as bereq.http.attack, as req is copied over as bereq and only slightly edited by Varnish (to remove the range-request header, for example).
Just a note, if you are attacked, v_b_r is probably a bit late to respond, as the backend as already been bothered. YMWV, of course. -- Guillaume Quintard
_______________________________________________ varnish-misc mailing list [email protected] https://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc
