Forum Discussion
Encryption error - SAML assertion: response is not encrypted
I use the below rule and successfully end up with our clients IP address. This will check for any pre-existing XFF, remove it, and then add the IP of the incoming request. It's a bit wasteful (why not just wipe out the XFF regardless of if it is there or not?) though.
when HTTP_REQUEST {
if {[HTTP::header exists X-Forwarded-For]}
{
HTTP::header remove X-Forwarded-For
HTTP::header insert X-Forwarded-For [IP::remote_addr]
} else {
HTTP::header insert X-Forwarded-For [IP::remote_addr]
}}
- Balazs_KelemenMar 21, 2024
Altostratus
I don't know what to say about this answer. Maybe this was not an answer at all?
Maybe anyone else?
- LiefZimmermanMar 22, 2024
Admin
Balazs_Kelemen - welcome to the DevCentral community!
Paulius and other MVP's tend to have years of experience and engagement in this community.
You can get a decent impression about "tenure" and levels of engagement by understanding the ranks shown next to each member. DevCentral Community Rankings ExplainedMight be a bit obfuscated (for the sake of whimsy) but anyone over Cumulus can be fairly judged NOT to be GenAI. ;D
Cheers.