diff --git a/roles/varnish/templates/kojipkgs.vcl.j2 b/roles/varnish/templates/kojipkgs.vcl.j2
index 60534e49a8..350cc23cc7 100644
--- a/roles/varnish/templates/kojipkgs.vcl.j2
+++ b/roles/varnish/templates/kojipkgs.vcl.j2
@@ -43,7 +43,7 @@ sub vcl_recv {
         return(purge);
     }
 
-    if (req.url ~ "^/repo/" && !(client.ip ~ repoallowed)) {
+    if (req.url ~ "^/repo/" && !(req.http.x-forwarded-for ~ repoallowed)) {
         return(synth(403, "Access denied."));
     }
     if (req.url ~ "^/mash/") {