Mailing-List: contact modules-dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: modules-dev@httpd.apache.org
Received-SPF: pass (herse.apache.org: local policy)
Subject: Re: deny access to unknow IP addresses
From: devel <dev001@pas-world.com>
To: modules-dev@httpd.apache.org
In-Reply-To: <4607CFA4.2020700@joe-lewis.com>
References: <1174758875.4379.4.camel@localhost.localdomain>
	 <1174756781.5715.7.camel@test.asus>
	 <1174903982.4370.8.camel@localhost.localdomain>
	 <4607CFA4.2020700@joe-lewis.com>
Content-Type: text/plain; charset=utf-8
Date: Mon, 26 Mar 2007 15:53:50 +0000
Message-Id: <1174924430.4591.20.camel@localhost.localdomain>
Mime-Version: 1.0
Content-Transfer-Encoding: quoted-printable

Well, I  wrote this stupid question:
> remote_ip always point to IP of client if server know it?

Really, I want say this, for clients that connect through a proxy.=20
Server always know HTTP_CLIENT_IP but can not know CLIENT_IP if proxy do
not send it or is false.

Directives of mod_authz_host seems to not include this.

In a case a filter get request before another modules get it, this
module should terminate connection if proxy do not send it. I do not
know is this is posible.


Thanks Joe. (very patient).


El lun, 26-03-2007 a las 07:50 -0600, Joe Lewis escribi=C3=B3:=20
> devel wrote:
> > Hello,
> > In=20
> > conn_rec *connection;
> > a can see:
> > char *remote_ip;
> >
> > remote_ip always point to IP of client if server know it?
> >  =20
> The server will always know the remote IP address - this is because=20
> every TCP connection has two end points, a source address and a=20
> destination.  In order to send packets back to whomever requested the=20
> connection, the source has to be known.  This is placed into the=20
> remote_ip of that record.  (I won't go into the dynamics of NAT and=20
> other network hacks as this is not a TCP/IP discussion arena.)
>=20
> Joachim gave the correct link for documentation on setting up=20
> authorization based on known IP addresses with Apache 2.2.
>=20
> If you must reinvent the wheel, it may be easier to download the Apache=20
> source code and review the mod_authz_host (or appropriate module for=20
> your specific apache version) to familiarize yourself with the code path=20
> of the module.
>=20
> Joe
--=20
--
Publicidad http://www.pas-world.com