It doesn't block the ip if there are multiple ip addresses in x-forwarded-for header.

Also can the logging be changed to log x-forwarded-for ip instead of load balancer's ip if DOSXForwardedForAsRemoteIP is set to 1 ?

Eg. In below log client ip is being printed as load balancer's ip, where if i have then it should print ip address of x-forwarded-for because i have "DOSXForwardedForAsRemoteIP 1"

[Tue Sep 29 01:01:04 2015] [error] [client 10.2.0.130] client denied by server configuration: proxy:http://localhost:8080/some/file.js

Hi there,

disclaimer: it's the first time I try to hack on C code to please forgive me for my lack of knowledge.

I have a question about this code:

apr_table_get(r->headers_in, "X-Forwarded-For")

I know the X-Forwarded-For header can have a list of IPs (comma separted). As far as I can tell, you set the X-Forwarded-For to the 'remote_ip' variable. The remote_ip is supposed to be a single IP, right?
So, as long as the X-Forwarded-For header is a single IP it works, correct?