cppcms-users

Re: [Cppcms-users] getting real ip of client

[kpeo <sla...@ya...>]

Shure, question is complex and highly depends on environment.
Assumed, that we use CppCMS without any web-servers, connected to TCP/IP sockets. So can (in contrast of Unix-sockets) "see" TCP/IP fields of client's packets. 

While, my method is simple:
1. check IP in HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, request().remote_addr()
2. check resulting IP on local interfaces of system.

Anyone encountered with a similar task?
Thanks anyway!

> > Hello,
> > 
> > Is there any way to check in CppCMS application whether client connection is local or remote (or just get real ip of client connection)?
> > Because any request environment like HTTP_CLIENT_IP can be faked and required low-level aio functions to get connection IP, that inaccessible in the application/service/request classes.
> > 
> > Regards,
> > kpeo
> > 
> > ------------------------------------------------------------------------------
> > Live Security Virtual Conference
> > Exclusive live event will cover all the ways today's security and
> > threat landscape has changed and how IT managers can respond. Discussions
> > will include endpoint security, mobile security and the latest in malware
> > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> > _______________________________________________
> > Cppcms-users mailing list
> > Cpp...@li...
> > https://lists.sourceforge.net/lists/listinfo/cppcms-users


 -- 

Re: [Cppcms-users] getting real ip of client

[kpeo <sla...@ya...>]

Oh, sorry, i'm hastened with my last letter. You answer cover questions.

Thanks very much for so fast and detailed answer!

> > There is request().remote_address() that helps you to deal with.
> > 
> > If your run behind reverse proxy, such proxies usually define headers
> > like X-Real-IP headers that are set to variables like HTTP_X_REAL_IP.
> > 
> > HTTP Proxies usually handle this correctly preventing hijacking
> > such headers.
> > 
> > If you use internal HTTP web server take a look on
> > 
> > http://cppcms.com/wikipp/en/page/cppcms_1x_config#http.proxy.remote_addr_headers
> > 
> > That allow request().remote_address() behave as expected
> > 
> > Artyom Beilis
> > --------------
> > CppCMS - C++ Web Framework: http://cppcms.com/
> > CppDB - C++ SQL Connectivity: http://cppcms.com/sql/cppdb/
> > 
> > ----- Original Message -----
> > 
> >> > From: kpeo <sla...@ya...>
> >> > To: cpp...@li...
> >> > Cc:
> >> > Sent: Tuesday, May 8, 2012 1:10 PM
> >> > Subject: [Cppcms-users] getting real ip of client
> >> >
> >> > Hello,
> >> >
> >> > Is there any way to check in CppCMS application whether client connection is
> >> > local or remote (or just get real ip of client connection)?
> >> > Because any request environment like HTTP_CLIENT_IP can be faked and required
> >> > low-level aio functions to get connection IP, that inaccessible in the
> >> > application/service/request classes.
> >> >
> >> > Regards,
> >> > kpeo
> >> >
> >> > ------------------------------------------------------------------------------
> >> > Live Security Virtual Conference
> >> > Exclusive live event will cover all the ways today's security and
> >> > threat landscape has changed and how IT managers can respond. Discussions
> >> > will include endpoint security, mobile security and the latest in malware
> >> > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> >> > _______________________________________________
> >> > Cppcms-users mailing list
> >> > Cpp...@li...
> >> > https://lists.sourceforge.net/lists/listinfo/cppcms-users
> > 
> > ------------------------------------------------------------------------------
> > Live Security Virtual Conference
> > Exclusive live event will cover all the ways today's security and
> > threat landscape has changed and how IT managers can respond. Discussions
> > will include endpoint security, mobile security and the latest in malware
> > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> > _______________________________________________
> > Cppcms-users mailing list
> > Cpp...@li...
> > https://lists.sourceforge.net/lists/listinfo/cppcms-users


 --