Mailing-List: contact modperl-help@perl.apache.org; run by ezmlm
Precedence: bulk
Received-SPF: pass (asf.osuosl.org: local policy)
Mime-Version: 1.0 (Apple Message framework v752.2)
Content-Transfer-Encoding: 7bit
Message-Id: <1BE3011C-871B-4198-B469-CB6B9B509166@2xlp.com>
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
To: list mod_perl <modperl@perl.apache.org>
From: Jonathan Vanasco <modperl-list@2xlp.com>
Subject: X-Forwarded-For
Date: Thu, 3 Aug 2006 19:00:35 -0400

my mp2 needs to get the ip of the remote address

on some installations, mp2 is on port 80

on other installations, mp2 is on 80xx and the ip is in X-Forwarded-For

i'd like to ensure that i pull the ip off the right place, under the  
right conditions.  all of my get_ip() calls  happen in a shared  
library though, so I need to figure out a way to handle this  under  
those constraints, and not deal with spoofs.

first i found this module
	Apache::ForwardedFor
	http://search.cpan.org/~jlawrenc/Apache-ForwardedFor-0.5/lib/Apache/ 
ForwardedFor.pm

but its
	Apache1
	not porting nicely
	designed oddly- doesn't seem to forw

short of rewriting it , which i might have to do, maybe someone has  
an apach2 compatible solution already?

i'm thinking that the easiest way to do this would be:

httpd.conf-
	run a preliminary handler that strips all x-forwarded-for headers  
unless:
		we're running on port 80
		we're running on port 80 but there's some internal lan header  
marking that says its coming off a load balancer i control

although i could just do a conditional rewrite of headers in a new  
forwarded module