This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Server logs WAF IP address in Apache error/access logs

I have Astaro 8.3 running in amazon EC2 with WAF configured and working well, however, I need Astaro to pass the clients IP address with the request to the backend server. We use the client IP address for many site related things including advanced logging.

Does anyone know of away I can get this working? I have no problem adding or modifying to the backend through the command line. (Yes I'm aware this breaks the support contract) Also is Astaro planing on adding client IP rewriting on as a feature in upcoming versions? This one thing will make or break whether or not we implement Astaro.

Thanks for the help,

Mike


This thread was automatically locked due to age.
Parents
  • There's not a way that I know of to do this currently with WAF ... I do think it would be a good feature to have, so one can turn on brute force password attack detection on one's website(s)... check out Astaro Security Gateway Feature Requests: Hot (929 ideas) and search for this feature, and if it's not listed, add it as a feature request.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • There's not a way that I know of to do this currently with WAF ... I do think it would be a good feature to have, so one can turn on brute force password attack detection on one's website(s)... check out Astaro Security Gateway Feature Requests: Hot (929 ideas) and search for this feature, and if it's not listed, add it as a feature request.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
No Data