PDA

View Full Version : External IP Address of Request


rgilchrist
10-15-2010, 03:31 AM
Hi
How do I obtain the IP Address of an external request after they have passed thru an IN gateway?

We have a webserver sitting behind an IN gateway, which is running a LAMP setup. When we view the $_SERVER['REMOTE_ADDR'] for a clients request, it gives the internal IP Address of the IN gateway e.g.10.96.2.26.

In other setups where we have replaced the IN gateway with an INSSL gateway, we have accessed the external IP address using the variable $_SERVER['HTTP_X_FORWARDED_FOR'], but this variable is not being set on the IN gateway setup.

Cheers
Rob

Jsmart
10-21-2010, 05:30 PM
Hello,

in this case you need to move to an INSSL or INSSLR gateway depending on the version of your grid.. the IN appliance does not support the "x-forward-for"a but the INSSL* appliances will give you this info.

Please let me know if you have further questions.

Regards,

Jessie

Jsmart
10-26-2010, 01:52 PM
Rob,

Does this get you the information you need? you can find the datasheet on INSSLR here:

http://doc.3tera.com/AppLogic29/CatGatewayINSSLR.html

Regards,

Jessie

rgilchrist
10-27-2010, 01:29 AM
Hi Jessie
Thanks for this.

The problem arose when we tried to move away from using a INSSL gateway. Our client is using a True Business with EV (turns the address bar green) SSL Cert from Geotrust. When we installed this cert with the intermediate certs (there are 2 certs) on the INSSL gateway, it would not serve the intermediate certs correctly, therefore Firefox would display a warning when we tried to switch to HTTPS.

As a work around, we tried using a IN Gateway and let the web server handle the SSL, but ran into the problem of the external IP Address not being available.

Do you know if INSSL or INSSLR gateways can handle multiple intermediate certs?


Cheers
Rob

Jsmart
10-28-2010, 09:19 AM
I do believe the INSSLR that ships as part of the 2.9 production release can do this.

Regards,

Jessie

rgilchrist
10-28-2010, 10:02 AM
Thanks Jessie, I'll have a play about with the order of the certs in the pem file and see if that fixes the problem.

Cheers
Rob