Forum Discussion
littlebunny
Nimbostratus
NimbostratusOnly keep XFF header for specific subnet ranges
Hello We have some external facing virtual servers that have requests coming in from both internal and external sources. What we'd like to do is keep XFF headers only for requests coming in fro...
SWJO
Cirrostratus
CirrostratusHi
when HTTP_REQUEST {
if { [HTTP::header exists X-Forwarded-For] } {
if { [class match [HTTP::header X-Forwarded-For] equals my_external_ip] } {
HTTP::header remove X-Forwarded-For
}
}
else {
return
}
}
I didn`t test this rule. but this form would be work.
