Hello!

On Fri, Mar 15, 2013 at 04:24:13AM -0400, varan wrote:

> I mean I haven't got full list of ip addresses that can be proxy, so I want
> nginx to look X-FORWARDED-FOR header for any ip address, and if the header
> exists to determine geo using the header. If there's no X-Forwarded-For
> header, then use ip address for geo.
> is it acceptable to use "proxy 0.0.0.0/0" ?
>
> for example:
>
> geo $geo {
> default ZZ;
> proxy 0.0.0.0/0;
>
> 127.0.0.1/32 RU;
> 192.168.0.1/32 UK;
> ...
> }

This will work, but it means that anybody will be able to easily
fool your geo detection.

--
Maxim Dounin
http://nginx.org/en/donation.html

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx