This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Server logs WAF IP address in Apache error/access logs

I have Astaro 8.3 running in amazon EC2 with WAF configured and working well, however, I need Astaro to pass the clients IP address with the request to the backend server. We use the client IP address for many site related things including advanced logging.

Does anyone know of away I can get this working? I have no problem adding or modifying to the backend through the command line. (Yes I'm aware this breaks the support contract) Also is Astaro planing on adding client IP rewriting on as a feature in upcoming versions? This one thing will make or break whether or not we implement Astaro.

Thanks for the help,

Mike

This thread was automatically locked due to age.

0 BrucekConvergent over 12 years ago

There's not a way that I know of to do this currently with WAF ... I do think it would be a good feature to have, so one can turn on brute force password attack detection on one's website(s)... check out Astaro Security Gateway Feature Requests: Hot (929 ideas) and search for this feature, and if it's not listed, add it as a feature request.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Sophos Platinum Partner

--------------------------------------

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel
0 chaosratt over 12 years ago

So there's no way for the actual webserver to get the client's IP? Doesn't the WAF/Astaro just use apache internally for forwarding? Why isn't it using the x-forward header?
X-Forwarded-For - Wikipedia, the free encyclopedia
Cancel
Vote Up 0 Vote Down

Cancel
0 TerryJohnson over 12 years ago

UTM9 WAF does pass the HTTP_X_FORWARDED_FOR header.

You can use mod_rpaf to make this transparent to your code.
Cancel
Vote Up 0 Vote Down

Cancel