On Thu, Jun 18, 2009 at 10:10 PM, Kevin
Castiglione<kevincastiglione@gmail.com> wrote:
> 2009/6/18 Igor Sysoev <is@rambler-co.ru>
>>
>> Also, this
>>
>>       if ($http_x_forwarded_for ~ "(?:^|,)\s*(\d+\.\d+\.\d+\.\d+)\s*$") {
>>           set  $addr  $1;
>>       }
>>
>>       fastcgi_param REMOTE_ADDR     $addr;
>>
>> means that anyone may forge his address.
>
> without this my web app gets client ip address as the ip address of the
> machine running nginx and not the actual client.
>

why not

fastcgi_param REMOTE_ADDR $remote_addr;

?
or is this for nginx on another pc used as proxy backend?


--
O< ascii ribbon campaign - stop html mail - www.asciiribbon.org