Mailing List Archive

[Bug 67909] mod_remoteip fails when real IP is internal
https://bz.apache.org/bugzilla/show_bug.cgi?id=67909

Eric Covener <covener@gmail.com> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |NEEDINFO

--- Comment #1 from Eric Covener <covener@gmail.com> ---
Do you use
https://httpd.apache.org/docs/2.4/mod/mod_remoteip.html#remoteipinternalproxy
for the peer that presents that header?

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 67909] mod_remoteip fails when real IP is internal [ In reply to ]
https://bz.apache.org/bugzilla/show_bug.cgi?id=67909

--- Comment #2 from Denis S. Valdenaire <dvaldenaire@gmail.com> ---
Thanks for your response;

I use this directive :

RemoteIPTrustedProxy 10.0.0.0/8

This is precisely what I complain about : it was not trusted at all, as log
says:

[Tue Oct 24 09:51:53.952335 2023] [remoteip:debug] [pid 26:tid 140171089540800]
mod_remoteip.c(679): [client 10.0.2.8:49822] AH01569: RemoteIP: Header
X-Forwarded-For value of 172.18.0.1 appears to be a private IP or nonsensical.
Ignored, referer: https://.../

The proxy presenting the X-Forwarded-For is the [client 10.0.2.8:49822], if I
understand correctly.

Anyway, I tried to put a lot of networks just to be sure, like :

RemoteIPTrustedProxy 10.0.0.0/8
RemoteIPTrustedProxy 10.0.2.8
RemoteIPTrustedProxy 172.16.0.0/16
RemoteIPTrustedProxy 192.168.0.0/16
RemoteIPInternalProxy 10.0.0.0/8
RemoteIPInternalProxy 172.16.0.0/16
RemoteIPInternalProxy 192.168.0.0/16

But still got the same error.

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 67909] mod_remoteip fails when real IP is internal [ In reply to ]
https://bz.apache.org/bugzilla/show_bug.cgi?id=67909

Denis S. Valdenaire <dvaldenaire@gmail.com> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|NEEDINFO |NEW

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org