Forum Discussion
istockchris_390
Nimbostratus
NimbostratusUnsuccessful matching against "address" data group
I'm trying to block IPs that show up in the X-Forwarded-For header, and I'm quickly finding out that the "Address" data group is very picky as to what you try to compare against it.
The rule I tri...
If you're going to use the Address data group type, you'll need to clean the input a little bit to verify that you're using a valid address for a comparison, and only a single address, etc. If you're trying to compare single IPs, you could just as easily use the string type for the comparison which is a little more forgiving. The Address type allows for subnet matching and the like though, that can be very powerful.
Does that help?
Colin
