nginx - get value of the header - x_forwarded_for in Nginx module (Naxsi)

[Ruslan Ermilov]

On Tue, Dec 24, 2019 at 08:00:26PM +0100, Marcin Kozlowski wrote:
> Thanks.
> 
> Works. For the reference, this is the code I used:
> 
>   ngx_uint_t n;
>   ngx_table_elt_t **h;
>   ngx_array_t a;
>   a = req->headers_in.x_forwarded_for;
>   n = a.nelts;
>   h = a.elts;
> 
> 
>   for (i = 0; i<n; i++) {
>     ngx_log_error(NGX_LOG_ERR, req->connection->log,
>               0, "x_forwarded_for: %s", h[i]->value.data);
>   }
> 
> BTW What would be the best practice in NGINX NASIX module or any other
> module to load a file with hundreds entries of IPs (hashmap, or what
> structure would be best?) which should be whitelisted later for comparison
> in NASIX module logic. Those IP should never be blocked by NAXSI.
> 
> When should I load this file in memory, in which component
> /module/function/step?
> 
> Links to some guides/sample code would be also appreciated.
> 
> Thanks,

http://nginx.org/en/docs/http/ngx_http_geo_module.html