Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
From: Ian Stuart <Ian.Stuart@ed.ac.uk>
To: httpd users list <users@httpd.apache.org>
In-Reply-To: 
	<484A6CA492BE654395D208B1D8D5393972F6B3@SOMEXEVS001.ex.ordersx.org>
References: 
	<484A6CA492BE654395D208B1D8D5393972F6B3@SOMEXEVS001.ex.ordersx.org>
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Date: 22 Oct 2002 12:33:36 +0100
Message-Id: <1035286416.12606.29.camel@lucas.ucs.ed.ac.uk>
Mime-Version: 1.0
Subject: RE: [users@httpd] Block Frontpage from grabbing site

On Tue, 2002-10-22 at 10:23, Boyle Owen wrote:
> The purpose of the WWW is for servers to deliver files to clients. The
> only thing you know authoritatively about the client is his IP address -
> and that is an ephemeral thing which constantly changes.
Even this may be wrong....

Almost all web-caches/proxies reset the REMOTE_ADDR variable to be
themselves (which is, of course, correct - technically :)

With Apache 2 servers (and there is a patch for Apache 1), the proxy can
set an X_FORWARDED_FOR_ADDR variable, however this is just a list of the
current X_FORWARDED_FOR_ADDR with the proxies client REMOTE_ADDR
appended....

(Yes, it does make life ... harder.)

-- 
--==++
Ian Stuart: Edinburgh University Data Library.

Information is not knowledge
Knowledge is not wisdom
Wisdom is not truth
Truth is not beauty
Beauty is not love
Love is not music
              -- Mary.

 Personal web site: http://lucas.ucs.ed.ac.uk/ 


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org