atom feed7 messages in ru.sysoev.nginxRe: http headers ip address
FromSent OnAttachments
rkmr...@gmail.comApr 19, 2009 9:15 am 
Michael ShadleApr 19, 2009 9:48 am 
rkmr...@gmail.comApr 19, 2009 1:43 pm 
Igor SysoevApr 21, 2009 3:41 am 
Igor SysoevApr 21, 2009 3:43 am 
Igor SysoevApr 21, 2009 3:44 am 
Michael ShadleApr 21, 2009 8:30 am 
Subject:Re: http headers ip address
From:Michael Shadle (mike@gmail.com)
Date:Apr 21, 2009 8:30:06 am
List:ru.sysoev.nginx

2009/4/21 Igor Sysoev <is@rambler-co.ru>:

No, you should not allow to override client address from all. Just from frontends:

set_real_ip_from fb-ip1; set_real_ip_from fb-ip2;

Yeah that's what I said - it was a bit roundabout. "only trust the header from your load balancer etc, w hich you probably want to do, set the netmask appropriately"