HAP - X-Forwarded-For

[Steve21]

Morning All,

 

So configured my Smoothwall for X-Forwarded-For as we keep getting all our logs on our firewall IP address so not much help in logging/IP bans etc.

 

But I can't find out if there's anywhere in HAP I can use this instead of the client IP? I know in IIS I can add it as an advanced log, but I'm guessing HAP wouldn't pick this up?

 

Thanks,

Steve

[nickbro]

In which way would you want HAP+ to use this?

[Steve21]

Hi Nick,

 

Basically since we had our smooth wall in and as we use reverse proxy all the hits on Hap are logged as the smooth wall ip

 

So if we have any issues like attempted admin logins it won't log who it is, also the ip block for multiple failed logins effectively blocks the whole internet as it blocks the firewall.

 

We talked to smooth wall and set up the header but I'm guessing the hap config looks at client ip in the header by default rather than anything like x-fordwarded-for when it's logging these ips

 

If that makes any sense? or do you need more info and some examples

 

Thanks,

Steve

[nickbro]

ok, for that you will need to edit the HAP+ project in visual studio. You need to edit the login.aspx.cs page replace UserHostAddress with Request.Headers.Get("x-fordwarded-for")

 

Rebuild HAP.Web and copy HAP.Web.dll to the bin folder.