Only keep XFF header for specific subnet ranges

Hello   We have some external facing virtual servers that have requests coming in from both internal and external sources. What we'd like to do is keep XFF headers only for requests coming in fro...