Aw: Re: [users@httpd] X-Forward-For in ssl_access_log / apache behind WAF

2017-10-05 Thread Morel Mosolff
Hi Yann unfortunately that makes no difference. It don't works even if I only try to block one ip-address like this: SetEnvIf Remote_Addr "1\.2\.3\.1" wav but the output is slighly different (see below) LogFormat "%l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined

[users@httpd] Server version: Apache/2.2.15

2017-10-05 Thread
Hi, I’ve just subscribe to Apache forum recently. Please advise URL for posting to the forum. I apologize for piggy-back on kottre...@gmail.com’s email below. We have recently upgraded our server to : Apache Server version: Apache/2.2.15 and have encountered thi

Re: [users@httpd] Difference in Apache version

2017-10-05 Thread Eric Covener
On Thu, Oct 5, 2017 at 11:07 AM, renee ko wrote: > Hello all, > > >- I am running Apache httpd version *2.2.29* and server built on Aug >23 2015 13:19:54 . > > /usr/local/apache2/bin/httpd -v > > *Server version: Apache/2.2.29 (Unix)* > > *Server built: Aug 23 2015 13:19:54* > > > >

[users@httpd] Difference in Apache version

2017-10-05 Thread renee ko
Hello all, - I am running Apache httpd version *2.2.29* and server built on Aug 23 2015 13:19:54 . /usr/local/apache2/bin/httpd -v *Server version: Apache/2.2.29 (Unix)* *Server built: Aug 23 2015 13:19:54* - But the server-status page shows a different version and built. [image

Re: [users@httpd] X-Forward-For in ssl_access_log / apache behind WAF

2017-10-05 Thread Yann Ylavic
Hi, On Thu, Oct 5, 2017 at 11:11 AM, Morel Mosolff wrote: > > #part 2: > SetEnvIf Remote_addr ("1\.2\.3\.1"|"1\.2\.2\.2") waf > CustomLog "logs/ssl_access_log" proxy env=!waf Did you try without the quotes, for instance: SetEnvIf Remote_addr ^(1\.2\.3\.1|1\.2\.2\.2)$

[users@httpd] X-Forward-For in ssl_access_log / apache behind WAF

2017-10-05 Thread Morel Mosolff
Hello together I'm a little bit confused about manipulation ssl_access_log to get the X-Forward-For IP but not the "WAF/Proxy" IP. (sorry for that long text...) # Settings: rhel 7.3 apache 2.4.6 Redirect: apache redirect (nearly) everthing to https - Apache is behind a Web Application Firewall