Hi,
Our web servers are behind an Amazon load balancer in TCP mode (transport layer) - so they cannot see the IP address if a client. I could configure load Balancer in HTTP mode and get Amazon to pass X-Forwarded-For header. Will Spam-0-Matic work with this header? Or does it look for REMOTE_ADDR?
If I run HTTPS then I will have to terminate SSL traffic on the load balancer to get this header forwarded to the web server. Not very good from a security point of view.
Any other alternative if the above is not possible?
|