Forum Discussion
NimbostratusHow to send BIG-IP LTM, X-forwarded IP's to IIS "Ip Domain Filter" ?
NacreousHi,
You can activate the X-Forwarded-For option in the http profile assigned to your Virtual Server.
Or you can use an irule for that :
when HTTP_REQUEST {
HTTP::header remove "X-Forwarded-For"
HTTP::header insert "X-Forwarded-For" "[IP::client_addr]"
}
Both solution works fine taken into account that you need to decrypt ssl (if https listening) and assign an http profile.
dfmcfadden49_27Thank you for the reply. normally X-forward only sends the external IP to the IIS log. I see this Irule is a little different then the one I have used over the years. when HTTP_REQUEST { HTTP::header insert X-Forwarded-For [IP::remote_addr] } Does this Irule send to IIS for configuring "IP Domain Filters"? I guess the question should be how to I get the information in the IIS log to the "IP Domian filter" configuration. Can it be sent directly from the F5 or what is the process within IIS? Regards,
- Yann_Desmarest_
I add the below line to avoid an attacker adding a custom X-Forwarded-For value :
HTTP::header remove "X-Forwarded-For"I'm using
which is the same asIP::client_addr
in your case.IP::remote_addrQuick description of the slight difference :
IP::client_addr - Returns the client IP address of a connection IP::remote_addr - Returns the IP address of the host on the far end of the connection.
