IP spoofing attack?!
Problem:
/! FAILSAFE /! Tue May 12 15:15:53 +0300 2009
Status: 500 Internal Server Error
IP spoofing attack?!
HTTP_CLIENT_IP=”10.1.200.218″
HTTP_X_FORWARDED_FOR=”217.117.64.2, 217.117.64.2″
Decision:
( Rails 2.3 )
ActionController::Base.ip_spoofing_check = false
Ruby on Rails 2.3 Release Notes
( Path )
forwarded_client_ip_with_test.patch
( READ )
https://rails.lighthouseapp.com/projects/8994/tickets/322
( READ )
http://github.com/rails/rails/commit/0a4a5f3129a137fc357e8444a08b135f0ad4fbe8