[imp] X-Originating-IP

[Patrick Timmons]

Hi.

I think it would be a good thing to have both addresses. Sometimes I need to
follow a client's conversation with the server for diagnostic purposes and when
they are behind a proxy, I can't. I agree though, it shouldn't be trusted.

Rich Lafferty wrote:
> 
> On Mon, Feb 12, 2001 at 04:39:24PM +0000, Clive McDowell (c.mcdowell@qub.ac.uk) wrote:
> > Folks,
> >
> > adding the line -
> >
> > X-Originating-IP: %REMOTE_ADDR%
> >
> > to header.txt causes the ip source header to be displayed in messages
> > generated using imp. The problem with this is that if a proxy cache
> > is used you get the cache address and not the client machine
> > address.
> 
> If you get the "client address" by any method other than looking at
> the address from which the http connection originated, then you're
> looking at information provided *by* the client, which is to say,
> entirely untrustable.
> 

-- 
Patrick Timmons, service informatique