Ensuring Your Web Server Sees the True Client IP Instead of the Smoothwall Filter and Firewall IP Address

When you set up a reverse proxy to route traffic through your Smoothwall Filter and Firewall, for example, to an internally hosted web server, you might only see the Smoothwall Filter and Firewall IP address in the web server access logs. 

You need to make sure that the Smoothwall Filter and Firewall is passing the correct external client IP information to the reverse proxy destination. To send the X-Forwarded-For header, to ensure that your web server sees the true Client IP, in the Smoothwall you need to turn on the Honor incoming X-Forwarded-For option.

Procedure

In the web proxy web filter options, turn on Honor incoming X-Forwarded-For, see our hep topic, Configuring the web proxy.

• Available proxy settings:
  • Advanced»
    • Web filter options:
      • Honor incoming X-Forwarded-For: "Enable"