# All visitor have same IP (my server IP) **URL:** \ **Category:** NGINX\ **Created:** [April 11, 2012, 11:48am UTC](https://www.ruby-forum.com/t/all-visitor-have-same-ip-my-server-ip/218762 "2012-04-11T11:48:25Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![dubstep](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/cdc98d/32.png) [@dubstep](https://www.ruby-forum.com/u/dubstep)\ **Post date:** [April 11, 2012, 11:48am UTC](https://www.ruby-forum.com/t/all-visitor-have-same-ip-my-server-ip/218762/1 "2012-04-11T11:48:25Z")
Additionally, compile the module “mod\_rpaf-2.0.so” for apache in case you are using apache as a proxied server ---
**Author:** ![Rajnesh\_Kumar\_Siwal](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/87869e/32.png) [@Rajnesh\_Kumar\_Siwal](https://www.ruby-forum.com/u/Rajnesh_Kumar_Siwal)\ **Post date:** [April 12, 2012, 4:43am UTC](https://www.ruby-forum.com/t/all-visitor-have-same-ip-my-server-ip/218762/2 "2012-04-12T04:43:11Z")
is already compiled and loaded and confugured . is normal to see alot of connexion from my server ip in the port 80 ? netstat -lanp | grep :80 | awk ‘{print $5}’ | cut -d: -f1 | sort | uniq -c | sort -n ``` 7 196.206.28.201 7 196.217.50.190 7 41.248.138.71 7 70.174.161.141 8 207.241.237.235 8 217.139.202.185 8 41.140.19.86 8 90.148.88.74 9 217.139.201.96 9 92.113.24.135 42 178.137.166.228 ``` 2029 xxx.xxx.xxx.xxx (this is ip server ) . nginx is a proxy for apache (port 8081) . netstat -lanp | grep :8081 | awk ‘{print $5}’ | cut -d: -f1 | sort | uniq -c | sort -n 1 0.0.0.0 2146 xxx.xxx.xxx.xxx (this is ip server ) is this normal or not ? i have firewall that kill and ban a large simultanous connexion in the port 80 , and my server ip get banned . and the hosted websie no longer work . Posted at Nginx Forum: > **[Re: all visitor have same IP (my server IP)](https://forum.nginx.org/read.php?2,225171,225194#msg-225194)** > > Additionally, compile the module "mod\_rpaf-2.0.so" for apache in case you are using apache as a proxied server -- Regards, Rajnesh Kumar Siwal +919818183024 \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ nginx mailing list nginx@ngin ---
**Author:** ![Rajnesh\_Kumar\_Siwal](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/87869e/32.png) [@Rajnesh\_Kumar\_Siwal](https://www.ruby-forum.com/u/Rajnesh_Kumar_Siwal)\ **Post date:** [April 12, 2012, 10:06am UTC](https://www.ruby-forum.com/t/all-visitor-have-same-ip-my-server-ip/218762/3 "2012-04-12T10:06:37Z")
On Wed, Apr 11, 2012 at 10:42:25PM -0400, activa wrote: Hi there, > is normal to see alot of connexion from my server ip in the port 80 ? From your server port 80? No, that’s not normal. But that’s not what you’re showing. To your server port 80 is normal; and to your server port 8081 is normal. > netstat -lanp | grep :80 | awk ‘{print $5}’ | cut -d: -f1 | sort | uniq > -c | sort -n This will include all of the connections from the world to your :80 server, plus all of the connections from your server to your :8081 server. (I’m assuming that you proxy\_pass to your\_ip:8081.) > 2029 xxx.xxx.xxx.xxx (this is ip server ) . > > nginx is a proxy for apache (port 8081) . You haven’t shown that configuration yet. Can you show the configuration of the location{} where you proxy\_pass? You will want to make sure that the “proxy\_set\_header X-Real-IP $remote\_addr;” line is active there – either because it is in that location, or because it is inherited into it. ## f Francis D. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)