cproudlock ced356882c net: strip the ephemeral source port from the forwarded client IP ...

IIS ARR sets X-Forwarded-For to clientip:port, and the port changes every
connection. Left in, the audit log showed IP:PORT, the dashboard IP fallback
never matched a stored (portless) DashboardDefault.ipaddress, and login rate
limiting keyed per-connection instead of per-host. Add an IPv6-safe
clientip.client_ip / strip_port helper and use it in the audit log, the
dashboard resolver, and the login rate-limit key.

2026-07-29 10:06:18 -04:00

1.5 KiB

Raw Blame History

View Raw