Forum: NGINX Geo Module. How to make nginx to check proxy for any ip?

Posted by varan (Guest)
on 2013-03-15 09:24
(Received via mailing list)
I mean I haven't got full list of ip addresses that can be proxy, so I 
want
nginx to look X-FORWARDED-FOR header for any ip address, and if the 
header
exists to determine geo using the header. If there's no X-Forwarded-For
header, then use ip address for geo.
is it acceptable to use "proxy 0.0.0.0/0" ?

for example:

geo $geo {
    default        ZZ;
    proxy          0.0.0.0/0;

    127.0.0.1/32   RU;
    192.168.0.1/32 UK;
    ...
}

Posted at Nginx Forum: 
http://forum.nginx.org/read.php?2,237392,237392#msg-237392
Posted by Maxim Dounin (Guest)
on 2013-03-15 11:03
(Received via mailing list)
Hello!

On Fri, Mar 15, 2013 at 04:24:13AM -0400, varan wrote:

>     proxy          0.0.0.0/0;
>
>     127.0.0.1/32   RU;
>     192.168.0.1/32 UK;
>     ...
> }

This will work, but it means that anybody will be able to easily
fool your geo detection.

--
Maxim Dounin
http://nginx.org/en/donation.html
Please log in before posting. Registration is free and takes only a minute.
Existing account (Switch to SSL-encrypted connection)
NEW: Do you have a Google/GoogleMail or Yahoo account? No registration required!
Log in with Google account | Log in with Yahoo account
No account? Register here.