infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

Client.ip is unusable due to proxies, look at forwarded-for

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2017-04-05 23:51:12 +00:00
parent ac41432c7c
commit 0a7e1e0c03
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/varnish/templates/kojipkgs.vcl.j2
View file

@ -43,7 +43,7 @@ sub vcl_recv {
return(purge);
}
if (req.url ~ "^/repo/" && !(client.ip ~ repoallowed)) {
if (req.url ~ "^/repo/" && !(req.http.x-forwarded-for ~ repoallowed)) {
return(synth(403, "Access denied."));
}
if (req.url ~ "^/mash/") {