- Patch #258397 by John Morahan, Dries, R.Muilwijk, Bart Jansens, grendzy, Berdir: IP address identification not broad enough.

1 files changed, 9 insertions, 2 deletions

diff --git a/sites/default/default.settings.php b/sites/default/default.settings.php
index f02f3f08d..d748aa4b5 100644
--- a/sites/default/default.settings.php
+++ b/sites/default/default.settings.php
@@ -284,8 +284,6 @@ ini_set('session.cookie_lifetime', 2000000);
 # $conf['maintenance_theme'] = 'garland';
 
 /**
- * reverse_proxy accepts a boolean value.
- *
  * Enable this setting to determine the correct IP address of the remote
  * client by examining information stored in the X-Forwarded-For headers.
  * X-Forwarded-For headers are a standard mechanism for identifying client
@@ -302,6 +300,15 @@ ini_set('session.cookie_lifetime', 2000000);
 # $conf['reverse_proxy'] = TRUE;
 
 /**
+ * Set this value if your proxy server sends the client IP in a header other
+ * than X-Forwarded-For.
+ *
+ * The "X-Forwarded-For" header is a comma+space separated list of IP addresses,
+ * only the last one (the left-most) will be used.
+ */
+# $conf['reverse_proxy_header'] = 'HTTP_X_CLUSTER_CLIENT_IP';
+
+/**
  * reverse_proxy accepts an array of IP addresses.
  *
  * Each element of this array is the IP address of any of your reverse