You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@trafficserver.apache.org by pentester <pe...@cert.gov.az> on 2020/10/09 04:58:45 UTC

header_rewrite cond HTTP_CF_CONNECTING_IP problem

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

     Hello Folks! 

Short story. My test setup looks: 

Cloudflare-->ATS (v ATS  v8.1.0)--> Apache

- From Apache: (PHP's var_dump($_SERVER)) i can see
$_SERVER['HTTP_CF_CONNECTING_IP'] without any issue. It's client real
IP. That's great!
 
*But i would like to set conditions using ATS without "touching" Apache
(origin)


** Problem: My rules never evaluates to TRUE. (Yes, i did "traffic_ctl
config reload" after applying changes to rules1.conf)

*My: //remap.config

map http://resource.dom/ http://localhost:5050/
@plugin=header_rewrite.so @pparam=rules1.conf


*My: //rules1.conf:

cond %{HEADER:HTTP_CF_CONNECTING_IP} /11.22.33.44/
set-status 404

cond %{CLIENT-HEADER:HTTP_CF_CONNECTING_IP} = 11.22.33.44
set-status 404


All of above conditions doesn't work anymore. 

(?) Could someone enlight me please what i'm doing wrong? 


Thanks in advance.







- -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=vsDs
- -----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=rAmC
-----END PGP SIGNATURE-----


Re: header_rewrite cond HTTP_CF_CONNECTING_IP problem

Posted by pentester <pe...@cert.gov.az>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Okay, after RTFM finally got the working solution :) (The secret is in
*HOOKS*)
Here is how this can be achieved:

//plugin.config

header_rewrite.so myconff.conf


//myconff.conf

cond %{READ_REQUEST_HDR_HOOK}
cond %{CLIENT-HEADER:CF-Connecting-IP} /MY.IP.XX/
set-status 403


After changes: "trafficserver restart".


Cheers,




On Fri, 2020-10-09 at 08:58 +0400, pentester wrote:
>      Hello Folks! 
> 
> Short story. My test setup looks: 
> 
> Cloudflare-->ATS (v ATS  v8.1.0)--> Apache
> 
> From Apache: (PHP's var_dump($_SERVER)) i can see
> $_SERVER['HTTP_CF_CONNECTING_IP'] without any issue. It's client real
> IP. That's great!
>  
> *But i would like to set conditions using ATS without "touching"
> Apache
> (origin)
> 
> 
> ** Problem: My rules never evaluates to TRUE. (Yes, i did
> "traffic_ctl
> config reload" after applying changes to rules1.conf)
> 
> *My: //remap.config
> 
> map http://resource.dom/ http://localhost:5050/
> @plugin=header_rewrite.so @pparam=rules1.conf
> 
> 
> *My: //rules1.conf:
> 
> cond %{HEADER:HTTP_CF_CONNECTING_IP} /11.22.33.44/
> set-status 404
> 
> cond %{CLIENT-HEADER:HTTP_CF_CONNECTING_IP} = 11.22.33.44
> set-status 404
> 
> 
> All of above conditions doesn't work anymore. 
> 
> (?) Could someone enlight me please what i'm doing wrong? 
> 
> 
> Thanks in advance.
> 
> 
> 
> 
> 
> 
> 
> -----BEGIN PGP PUBLIC KEY BLOCK-----
> Version: GnuPG v2.0.22 (GNU/Linux)
> 
> mQINBF68kXkBEAD9fDwkcQqbbgbAa7/Oy07r2Lt2SoYbQFAlK8ECa+25QlNdvfH5
> c/EBrvb5hyE5D33AZdv9Dee40OTmJGQQc1M6jDb8iOlZiNaDc3ZcfZzGhhKsEFNr
> hWPnaC+58Z0dTjpG03dRRWFs1Xrn1r2HTqhq5rG5UddnPT3pwFjQBuSxJTGn3i9P
> tZKl7WPgmfXgGXKDit+tAEjqPRFgiMkJYqsDJZFd+Xoon8Bi/6LK1asxykb/2qrY
> maEaWkJ7x5nzio/5pne0/OVZtExZCK3439ibEI0ppzNHcCEhua1Kk3SzQXFcvt6s
> 9QssaC/N/njm07eEJ7GyvV6w9NtJRgQZ0Bf8uYFEkDgdtHnkVnCr/YsS3f1Yl63c
> gOPMPxYaZrUjYWrJEnm2V5XxdoVYs4s8gxY6jEQ5oWQmMpkPhOekWMkOw+3p+hFn
> 2nyZhdb8KkvWa34Lif3fNfNoKhk0PWD+rwG9BwqTKxEAUVmxHvy74F1hvzYk+5IL
> zCDzwGTpCQ/xgIdnjfHdel0tOOIgCnXCsyh/sFuB4XsoVeFdnrws2nVZQVXLWFJF
> va8WpzVLWr2twHO6Z3pB10JbQcFEPBnYlCO8pcZvydLwcrROG9G2PrUBHWjvQD0o
> 2kpDC89byGpMVM1cx8AWq7sDtjYeW6vrcFJaHarymG1DzAFUjYO9UhMgNwARAQAB
> tB9wZW50ZXN0ZXIgPHBlbnRlc3RAY2VydC5nb3YuYXo+iQI/BBMBAgApBQJevJF5
> AhsDBQkB4TOABwsJCAcDAgEGFQgCCQoLBBYCAwECHgECF4AACgkQytVB6cybO77G
> Qg//StzzAgIHZHuDMh94Kh/qOSAxynumTnhZ6VZU0/59CzQUu285cLpZUmPwJdaz
> GmS795NwZVnbla3bKm1HR7d2LwOB24rSgoCPgbTEqMxDzm2KbdOnnSi98vdRGdWp
> p3nS7T6oZ2+6CPY8Pg+hvD8LfhwdcUmVNhDENrZ0agSEBmdj+At+7jOBbQUvSKPk
> Revw/kdQeo+SZKOE2gs/MDJsaSFv4lhyTy6jKbPFHbk5C+ZJ32BPDL3IZ02pdUVZ
> WKBnX5d3z9EHliKpMyZHQu2998t9wz447ab9W7AIxhuD+vqjrQYRLFk2oKb3/eDW
> RPDRIfCk2py9+e9j38cnPhtsmXO5eYoXa4mbBwMPieCqRfN3Msna7USbPbe4mfgb
> AIdrJCYj2TrYs6ErdRXpb4I60iXZlTWXYdQlVYLLdn2Sb6lqfgREhryLZADxIcoN
> YwYSJE3NsULKlhPub4wOMCIIaQk7GLz02ZcFGORTtnFKHcg91GqcNCj7SGu+2C3n
> hpPNJVDnbgU4XToMmKgALFpG82JXEuQYUOH8/SB+qlrBMCwoSuLSO2Tu5l0hHCWw
> bp8al8yIMHCfqAvrCntGE+rpJKHvO7BhzL+tvvA3HJn4loKhMq9J8v+gI+YEjUsU
> WpEOmusARUiBVi4MlUxoNQH8yS7zMNXkFoaQOf+yWH3BCSi5Ag0EXryReQEQANsd
> iZZW8vt4STelg0D/PW4sRYUgm0gQgp/V6PlOiwlJ+x7DRCdEtlzLnr/wyB0TbwHO
> 7hxAhAlAHjgTAbDYAuz2Scm9OiiNiZpJqL/ka9gsVVczXgZzgWg9cuFtHc8CMPjs
> 0D7yqc6ANQeVJLCqJ/+4jyQzNc5VZPm+tJ6hnTLcEaok+9dPnB8/9cVo88tVhWN+
> /9jvGAxB/rcfY+eQEBwxmOk9w74Vs0Fj1pIcsZYrWounYG4Dh9/O+xw3E0mr1Sj2
> YJmpTWRrUqLqxeGm5lptn9HBTA6qecJrX9urh7djXUbcRZcptBpaHfYvO1lcvRhZ
> 6ndpNAnknp/6FaCCqWKwKkAr3TtB7uJbxz+xJAi+fU2ZOkyNeBlavzmZinRRmujn
> Rdkqgtks0qUMQVdbNju/A36O9uVZyEm+lkMFNNq+Q0dehRLsUjYJJywCjB7Pwa6d
> FmrRGhTxd9J1qxkzCue941TNYJkPfVAuhyuAAO85TXi3fF20QdxC4IgIzl39xScY
> k/gTzIbDUFlKn+BIC5O2QSLpof8r0qhkZIXA3D/6HBMpT9IemI2BeOf6VpwN66nn
> sJqk/3t8naS5nxyZ8lQe85JOyxane5KT7mRK+x9vyBixlnWh3UhRbMP8/TyrY0/n
> qySu0VOrQn2FlssL13EWvsi45rY13h0i2UcEI641ABEBAAGJAiUEGAECAA8FAl68
> kXkCGwwFCQHhM4AACgkQytVB6cybO76hSRAA2v5Wf1C9yJBCr/USYRcgsmbJNWlc
> gm4agVBorFxBlr3+D3numYNNfm20PenYku/UBgMK5bCr67S2+0xo97RnDcRudbAx
> sV49/1xVPjjwj5HCY0EFS34oKKoGMp57ll4ewbAdBwgz8j6ld72Mg05ZReLKbtWr
> 9h12VaO1JrGC+XzCTWJc1pDWB5Q3Sv2UENpjr203jIlE44O7qepfaP+3bnWPMmG7
> oQlmuggx/k3nbLPUiCcYLg5yiYBmTQHTUnB4v5L2nT3IEG2DbuEqWbwewIsGaSx9
> eGG2gkRtJNpRSS6+sWMFKOW7RR2YgDQoNm5XOwgZhoMYwXs5fD0ul5kFVfVPYYOl
> DrDIdRjr3L3gSQoWg+3ZlO6Tlwtva8QlDjUdY93cPykMgtv0iovNiJe3Lf25hVJl
> DMsQNjtmhsHugjT+VuIk9Zw2+SCSKFWcxeUs3p+nmhNlx+NIIE4zJUEu9lOG6uIP
> U/lGOu/SX53o0eoBsofPfJqILOlweFEvMnL/+wOy534eaPe1d5HhPm37h/8cYFUY
> a2bV4gCxZjAPyQpLsOI9EOVJJLxF36MIKrZ44OyRxix1DNCQu2S3oG6ljMPHsQ9E
> zmWOvETxGfgppc8A1smmoBMiGnNnaZVbo4v7TE+9x337yDVUiYYriV3RMPDOVTbv
> 0/I9kH7m8tCtYKI=
> =vsDs
> -----END PGP PUBLIC KEY BLOCK-----
- -- 




- -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=vsDs
- -----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=PUB0
-----END PGP SIGNATURE-----