Forum Discussion
Jeffrey_Tacy_47
Nimbostratus
As far as I know, there's no harm in trying to remove missing headers so this rule can be pretty simple. This is a well-tested rule and should be used without any HTTP profile XFF options:
when HTTP_REQUEST {
HTTP::header remove X-Forwarded-For
HTTP::header insert X-Forwarded-For [IP::remote_addr]
}
satish_txt_2254
Mar 17, 2016Cirrus
You nailed it... superb!!!