<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <p>We use mod_remoteip for this<br>
    </p>
    <p><a class="moz-txt-link-freetext" href="https://httpd.apache.org/docs/2.4/mod/mod_remoteip.html">https://httpd.apache.org/docs/2.4/mod/mod_remoteip.html</a></p>
    <p>Conf is very simple, and this module is built into the
      Debian/Ubuntu package:</p>
    <p>        RemoteIPHeader X-Forwarded-For<br>
      Â Â Â Â Â Â Â  RemoteIPTrustedProxy x.x.x.x y.y.y.y<br>
      <br>
    </p>
    <div class="moz-cite-prefix">On 2/21/19 5:31 AM, Armando Martins via
      ZendTo wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:WM!66c426ae0328d9c324d6e3529abb4775a919108343ffa4d4491852a74d31bfd7d43abe84ed2fa1613e10bea7c916e698372b48b5c6a413ba704ffa8be10583a7!@mx.jul.es">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">
        <div dir="ltr">You're welcome ;) </div>
        <div dir="ltr">You just need to configure the rpaf module and
          stop using x-forwarded-for for you apache logs. Rpaf do all
          the job.
          <div><br>
          </div>
          <div>
            <div>Explanation from the author:</div>
            <div><br>
            </div>
            <div>“Rpaf changes the remote address of the client visible
              to other Apache modules when two conditions are satisfied.
              First condition is that the remote client is actually a
              proxy that is defined in module configuration. Secondly if
              there is an incoming X-Forwarded-For header and the proxy
              is in it's list of known proxies it takes the last IP from
              the incoming X-Forwarded-For header and changes the remote
              address of the client in the request structure.”</div>
          </div>
        </div>
      </div>
      <br>
      <div class="gmail_quote">
        <div dir="ltr" class="gmail_attr">Le jeu. 21 févr. 2019 Ã Â 11:26,
          Gardener, Ray A <<a href="mailto:R.A.Gardener@shu.ac.uk"
            moz-do-not-send="true">R.A.Gardener@shu.ac.uk</a>> a
          Ã©crit :<br>
        </div>
        <blockquote class="gmail_quote" style="margin:0px 0px 0px
          0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
          <div lang="EN-GB">
            <div class="gmail-m_5142925366682637396WordSection1">
              <p class="MsoNormal"><span>Hi Armando, </span></p>
              <p class="MsoNormal"><span> </span></p>
              <p class="MsoNormal"><span> </span></p>
              <p class="MsoNormal"><span>Thanks for  this. Would I just
                  need to configure the rpaf module  on Apache?  Is 
                  there anything else Â that needs doing in the zendto
                  configuration?</span></p>
              <p class="MsoNormal"><span> </span></p>
              <p class="MsoNormal"> </p>
              <p class="MsoNormal">Ray Gardener</p>
              <p class="MsoNormal">Infrastructure Analyst</p>
              <p class="MsoNormal">Digital technology Services</p>
              <p class="MsoNormal">Sheffield Hallam University</p>
              <p class="MsoNormal">0114 225 4926</p>
              <p class="MsoNormal"> </p>
              <p class="MsoNormal"><span> </span></p>
              <p class="MsoNormal"><span> </span></p>
              <p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span
                  lang="EN-US"> ZendTo <<a
                    href="mailto:zendto-bounces@zend.to" target="_blank"
                    moz-do-not-send="true">zendto-bounces@zend.to</a>>
                  <b>On Behalf Of </b>Armando Martins via ZendTo<br>
                  <b>Sent:</b> 21 February 2019 09:40<br>
                  <b>To:</b> ZendTo Users <<a
                    href="mailto:zendto@zend.to" target="_blank"
                    moz-do-not-send="true">zendto@zend.to</a>><br>
                  <b>Cc:</b> Armando Martins <<a
                    href="mailto:armando.mart1s@gmail.com"
                    target="_blank" moz-do-not-send="true">armando.mart1s@gmail.com</a>><br>
                  <b>Subject:</b> Re: [ZendTo] support for
                  x-forwarded-for headers</span></p>
              <p class="MsoNormal"> </p>
              <div>
                <p class="MsoNormal">Hi,</p>
                <div>
                  <p class="MsoNormal"> </p>
                </div>
                <div>
                  <p class="MsoNormal">you can use the rpaf apache
                    module. I use this behind haproxy and it works fine.</p>
                </div>
              </div>
              <p class="MsoNormal"> </p>
              <div>
                <div>
                  <p class="MsoNormal">Le jeu. 21 févr. 2019 Ã Â 10:27,
                    Gardener, Ray A via ZendTo <<a
                      href="mailto:zendto@zend.to" target="_blank"
                      moz-do-not-send="true">zendto@zend.to</a>> a
                    Ã©crit :</p>
                </div>
                <blockquote
style="border-top:none;border-right:none;border-bottom:none;border-left:1pt
                  solid rgb(204,204,204);padding:0cm 0cm 0cm
                  6pt;margin-left:4.8pt;margin-right:0cm">
                  <div>
                    <div>
                      <p class="MsoNormal">Hi,
                      </p>
                      <p class="MsoNormal"> </p>
                      <p class="MsoNormal">Access to our zendto
                        installation is behind an F5 load-balancing
                        proxy.  The affect of this is that the IP
                        addresses of client access all look to come
                        from  the IP address associated with the proxy
                        rather than the actual Â IP address of the client
                        machines. Â Â Â The proxy address is what Â is
                        captured in the zendto database and is included
                        in  the reports which zendto sends out. Â Â For
                        security it would be useful to see the  client
                        IP addresses.   The Apache server can be
                        configured to log this  as  an  x-forwarded-for
                        address</p>
                      <p class="MsoNormal"> </p>
                      <p class="MsoNormal"><a
                          href="https://en.wikipedia.org/wiki/X-Forwarded-For"
                          target="_blank" moz-do-not-send="true">https://en.wikipedia.org/wiki/X-Forwarded-For</a></p>
                      <p class="MsoNormal"> </p>
                      <p class="MsoNormal">is there any way that zendto 
                        con be configured to use either x-forwarded-for
                        or a similar mechanism  to log and report the
                        real IP address of the client?</p>
                      <p class="MsoNormal"> </p>
                      <p class="MsoNormal"> </p>
                      <p class="MsoNormal"> </p>
                      <p class="MsoNormal">Ray Gardener</p>
                      <p class="MsoNormal">Infrastructure Analyst</p>
                      <p class="MsoNormal">Digital Technology Services</p>
                      <p class="MsoNormal">Sheffield Hallam University</p>
                      <p class="MsoNormal">0114 225 4926</p>
                      <p class="MsoNormal"> </p>
                      <p class="MsoNormal"> </p>
                      <p class="MsoNormal"> </p>
                    </div>
                  </div>
                  <p class="MsoNormal">_______________________________________________<br>
                    ZendTo mailing list<br>
                    <a href="mailto:ZendTo@zend.to" target="_blank"
                      moz-do-not-send="true">ZendTo@zend.to</a><br>
                    <a href="http://jul.es/mailman/listinfo/zendto"
                      target="_blank" moz-do-not-send="true">http://jul.es/mailman/listinfo/zendto</a></p>
                </blockquote>
              </div>
              <p class="MsoNormal"><br clear="all">
              </p>
              <div>
                <p class="MsoNormal"> </p>
              </div>
              <p class="MsoNormal">-- </p>
              <div>
                <p class="MsoNormal">Armando Martins</p>
              </div>
            </div>
          </div>
        </blockquote>
      </div>
      <br clear="all">
      <div><br>
      </div>
      -- <br>
      <div dir="ltr" class="gmail_signature">Armando Martins<br>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
ZendTo mailing list
<a class="moz-txt-link-abbreviated" href="mailto:ZendTo@zend.to">ZendTo@zend.to</a>
<a class="moz-txt-link-freetext" href="http://jul.es/mailman/listinfo/zendto">http://jul.es/mailman/listinfo/zendto</a>
</pre>
    </blockquote>
  </body>
</html>