[hunchentoot-devel] real-remote-addr and proxy chains

[Edi Weitz]

On Sun, 05 Nov 2006 13:48:18 -0700, "Robert J. Macomber" <tbnl at rojoma.com> wrote:

> Well, if you actually want the XFF header, there's always (header-in
> :x-forwarded-for) but this would save some processing.  If you want
> the "real remote address", presumably you're thinking of looking
> past some known proxy (or chain of known proxies) and want the
> single address that came into it.  I'm sure the "last address in the
> list" is the common case, though.

Er, if the proxies add to the end of the list (which I didn't take
into account), it'd be better to return the first and not the last
element of the list, right?

> Oh, and on another note, COOKIE-OUT returns a (name . cookie) pair
> instead of just the cookie.  Is there a reason for this?  I'm pretty
> sure it's just a forgotten call to CDR.

Yep, will be fixed.

Thanks,
Edi.