Title: Varnish reverse-proxy
Last modified: May 16, 2023

---

# Varnish reverse-proxy

 *  Resolved [mizogorou](https://wordpress.org/support/users/mizogorou/)
 * (@mizogorou)
 * [3 years, 1 month ago](https://wordpress.org/support/topic/varnish-reverse-proxy/)
 * Hello,
 * As I’m using a Vanish with Apache2 reverse-proxy. When an attack begins, WordPress
   login is blocked for all users.
 * Debug:
 * HTTP_CF_CONNECTING_IP = IP0
   HTTP_X_FORWARDED_FOR = IP0,IP1REMOTE_ADDR = 127.0.0.1
 * Log:
 * Date IP Tried to log in as Gateway
 * May 16, 2023 20:39 127.0.0.1 myadmin_username (16 lockouts)wp_xmlrpcUnlocked
 * How could I setup Limit Login Attempts Reloaded in order it can see and block
   real IPs?

Viewing 5 replies - 1 through 5 (of 5 total)

 *  Plugin Author [WPChef](https://wordpress.org/support/users/wpchefgadget/)
 * (@wpchefgadget)
 * [3 years, 1 month ago](https://wordpress.org/support/topic/varnish-reverse-proxy/#post-16745247)
 * You need to add HTTP_CF_CONNECTING_IP into the Trusted IP Origins field (first
   position).
 *  Thread Starter [mizogorou](https://wordpress.org/support/users/mizogorou/)
 * (@mizogorou)
 * [3 years, 1 month ago](https://wordpress.org/support/topic/varnish-reverse-proxy/#post-16745255)
 * Thank you very much.
 *  Thread Starter [mizogorou](https://wordpress.org/support/users/mizogorou/)
 * (@mizogorou)
 * [3 years, 1 month ago](https://wordpress.org/support/topic/varnish-reverse-proxy/#post-16745270)
 * Does this plugin still work great after I put HTTP_CF_CONNECTING_IP into the 
   Trusted IP Origins field?
 * I mean Limit Login Attempts plugin still can block attacker right?
 * Thanks in advance.
 *  Plugin Author [WPChef](https://wordpress.org/support/users/wpchefgadget/)
 * (@wpchefgadget)
 * [3 years, 1 month ago](https://wordpress.org/support/topic/varnish-reverse-proxy/#post-16745289)
 * Absolutely.
 *  Thread Starter [mizogorou](https://wordpress.org/support/users/mizogorou/)
 * (@mizogorou)
 * [3 years, 1 month ago](https://wordpress.org/support/topic/varnish-reverse-proxy/#post-16745293)
 * Thank you for your help.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Varnish reverse-proxy’ is closed to new replies.

 * ![](https://ps.w.org/limit-login-attempts-reloaded/assets/icon-256x256.png?rev
   =2456910)
 * [Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention](https://wordpress.org/plugins/limit-login-attempts-reloaded/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/limit-login-attempts-reloaded/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/limit-login-attempts-reloaded/)
 * [Active Topics](https://wordpress.org/support/plugin/limit-login-attempts-reloaded/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/limit-login-attempts-reloaded/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/limit-login-attempts-reloaded/reviews/)

 * 5 replies
 * 2 participants
 * Last reply from: [mizogorou](https://wordpress.org/support/users/mizogorou/)
 * Last activity: [3 years, 1 month ago](https://wordpress.org/support/topic/varnish-reverse-proxy/#post-16745293)
 * Status: resolved