Title: Problem with IP Source
Last modified: June 26, 2018

---

# Problem with IP Source

 *  Resolved [tbclark3](https://wordpress.org/support/users/tbclark3/)
 * (@tbclark3)
 * [7 years, 11 months ago](https://wordpress.org/support/topic/problem-with-ip-source/)
 * I am running WordPress under Docker, and behind an HTTP proxy in order to use
   SSL. WP receives logins from the LAN (which is 10.1.0.0) and WAN. For the purpose
   of logging, 10.1.0.0 is a valid IP and should be logged. When I set IP Source
   to HTTP_X_FORWARDED_FOR, which is the only valid choice, it immediately reverts
   back to HTTP_CLIENT_IP, which is always blank. I think you have “over-engineered”
   the automatic function. If I set the IP Source to something appropriate for my
   environment, it should stay there. Perhaps you could consider adding an “Auto”
   choice, but otherwise leaving the administrator’s choice intact.

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Plugin Author [One Dollar Plugin](https://wordpress.org/support/users/onedollarplugin/)
 * (@onedollarplugin)
 * [7 years, 11 months ago](https://wordpress.org/support/topic/problem-with-ip-source/#post-10435193)
 * The problem isn’t over-engineering, the issue is local IP addresses. Shield doesn’t
   consider local IP addresses as public site visitors, so it generally wont permit
   an IP source which delivers a local IP address. We’ll have a look at perhaps 
   not changing the source when all sources don’t provide a valid IP.
 *  Thread Starter [tbclark3](https://wordpress.org/support/users/tbclark3/)
 * (@tbclark3)
 * [7 years, 11 months ago](https://wordpress.org/support/topic/problem-with-ip-source/#post-10438438)
 * What I mean by “over engineered” is that you are overriding the user’s decision
   about legitimate IP addresses when there is no basis for doing so. My logs show
   both 172.17 and 19.1 subnets for connections from my LAN. Docker usually chooses
   172.17, and I chose 10.1. However, it could easily have been the other way. Had
   I already been using 172.17, I would have configured Docker to use something 
   else, possibly 10.1. You should not, and cannot, make any assumptions about the
   validity of IP addresses based on whether they are routable or not. My environment,
   like many, would have non-routable addresses originating from the LAN, and routable
   addresses originating from the WAN. In addition, almost all of them show a 172.17
   address as the REMOTE)ADDR because all of the packets come through Docker.
 * I think it would be reasonable for you to offer an option of “Auto” meaning that
   you would make decisions on the fly about which address is correct. However, 
   if I select HTTP_X_FORWARDED_FOR, it should remain that way, no matter what it
   contains.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Problem with IP Source’ is closed to new replies.

 * ![](https://ps.w.org/wp-simple-firewall/assets/icon-256x256.png?rev=3054572)
 * [Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning](https://wordpress.org/plugins/wp-simple-firewall/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wp-simple-firewall/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wp-simple-firewall/)
 * [Active Topics](https://wordpress.org/support/plugin/wp-simple-firewall/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wp-simple-firewall/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wp-simple-firewall/reviews/)

 * 2 replies
 * 2 participants
 * Last reply from: [tbclark3](https://wordpress.org/support/users/tbclark3/)
 * Last activity: [7 years, 11 months ago](https://wordpress.org/support/topic/problem-with-ip-source/#post-10438438)
 * Status: resolved