General Options – IP detection

  • Graami

    (@graami)


    7 years, 11 months ago

    We don’t seem to be able to set up so that IPs are being detected properly.

    We were advised by our hosting company that the original client IP is served using HTTP_X_FORWARDED_FOR header and that PHP references this using the following $_SERVER var: $_SERVER[‘HTTP_X_FORWARDED_FOR’].

    WordFence options have been set to: “Use the X-Forwarded-For HTTP header.” But IPs are still not being recorded accurately, and scans are producing the error: “Unable to accurately detect IPs”

    Any suggestions on where to look next / how to resolve?

    Thanks

Viewing 6 replies - 1 through 6 (of 6 total)
  • wfyann

    (@wfyann)

    7 years, 11 months ago

    Hi @graami,

    Can you please confirm with your hosting provider if you have a front-end proxy?

    If you select the “Let Wordfence use the most secure method to get visitor IP addresses” option are IP addresses accurately detected?

    Thread Starter Graami

    (@graami)

    7 years, 11 months ago

    Hi wfyann,

    Advice from the hosts is that there is no front-end proxy:

    “Our website is running Apache webserver, There is No proxy in front of it. But there a Classic Load balancer. AWS Load Balancer (CLASSIC)”

    If I set “Let WordFence use the most secure…” setting the problem still persists. It brings back the same IP (the serever IP I guess) for all settings in the IP detection section.

    Any idea what we can try?

    Thanks!

    Thread Starter Graami

    (@graami)

    7 years, 11 months ago

    Hi @wfyann, any further advice? We’re still looking to resolve the problem.

    Thanks.

    wfalaa

    (@wfalaa)

    7 years, 10 months ago

    Hi @graami

    Please check “IP Detection” section in (Wordfence > Tools > Diagnostics), if the “X-Forwarded-For” header is reporting two IP addresses, then you can choose “X-Forwarded-For” in “How does Wordfence get IPs” option then click on “Edit Trusted Proxies” and add that incorrect IP address there, check this screenshot.

    If this wasn’t the case, then please share a screenshot showing “IP Detection” section in the diagnostics page.

    Thanks.

    Thread Starter Graami

    (@graami)

    7 years, 10 months ago

    Hi,

    Thanks for the reply, here’s what we have set [LINK]. Still seems to not be showing the proper IP address.

    Is that as it should be?

    Thanks,
    G

    wfalaa

    (@wfalaa)

    7 years, 9 months ago

    Hi Graami,

    Based on this screenshot, please select “Use PHP’s built in REMOTE_ADDR” option in “How does Wordfence get IPs” and remove the IP address you added in “Trusted Proxies”.

    Thanks.

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘General Options – IP detection’ is closed to new replies.