logging client IPs when running behind non-Zimbra nginx HTTP proxy

[bradfritz]

I have a test installation of ZCS running behind a non-Zimbra nginx
HTTP proxy on a separate host:

Internet --> Firewall (w/ public IP) --> nginx (172.x.x.10:443)
--> ZCS (172.x.x.113:443)

Is it possible to configure Zimbra so it trusts the reverse proxy
(172.x.x.10) and uses the X-Forwarded-For values provided by the
proxy server in mailbox.log and audit.log ?

Basically what I'm looking for is the mod_rpaf for Apache
equivalent for Zimbra.

Thanks for any help!

--Brad

[j2b]

Have you managed to solve this issue? Looking for similar solutions.

[bradfritz]

Originally Posted by j2b

Have you managed to solve this issue? Looking for similar solutions.

No, I have not...but I have not spent much time investigating since
I posted either. (My Zimbra install is for evaluation purposes and
my production mail service uses Postfix+Courier+SquirrelMail.)

--Brad

[j2b]

Yesterday I found an answer. Tested - and it works as far as I need this implementation. The only thing to remember is to manually make these changes after ZCS updates/upgrades, as all configuration files are overwritten.
Here is the link on forum article: [SOLVED] Nessus Security Scan Fail - Internal IP in HTTP Header

Read comment #4