Does anyone know how to install the apache mod ' mod_remoteip ' ? I use Cloudflare and I see all the IP addresses from users on my website from Cloudflare. I don't see their real IP address.

<VirtualHost *:80> ServerAdmin webmaster@example.com DocumentRoot "/www/wwwroot/mysite.com" ServerName 0efe0d19.mysite.com ServerAlias mysite.com #errorDocument 404 /404.html ErrorLog "/www/wwwlogs/mysite.com-error_log" CustomLog "/www/wwwlogs/mysite.com-access_log" combined # Use Cloudflare's 'CF-Connecting-IP' header to get the real client IP RemoteIPHeader CF-Connecting-IP # Define trusted proxies (Cloudflare IP ranges) RemoteIPTrustedProxy 103.21.244.0/22 RemoteIPTrustedProxy 103.22.200.0/22 RemoteIPTrustedProxy 103.31.4.0/22 RemoteIPTrustedProxy 104.16.0.0/13 RemoteIPTrustedProxy 104.24.0.0/14 RemoteIPTrustedProxy 108.162.192.0/18 RemoteIPTrustedProxy 131.0.72.0/22 RemoteIPTrustedProxy 141.101.64.0/18 RemoteIPTrustedProxy 162.158.0.0/15 RemoteIPTrustedProxy 172.64.0.0/13 RemoteIPTrustedProxy 173.245.48.0/20 RemoteIPTrustedProxy 188.114.96.0/20 RemoteIPTrustedProxy 190.93.240.0/20 RemoteIPTrustedProxy 197.234.240.0/22 RemoteIPTrustedProxy 198.41.128.0/17 #DENY FILES <Files ~ (\.user.ini|\.htaccess|\.git|\.env|\.svn|\.project|LICENSE|README.md)$> Order allow,deny Deny from all </Files> #PHP <FilesMatch \.php$> SetHandler "proxy:unix:/tmp/php-cgi-83.sock|fcgi://localhost" </FilesMatch> #PATH <Directory "/www/wwwroot/mysite.com"> SetOutputFilter DEFLATE Options FollowSymLinks AllowOverride All Require all granted DirectoryIndex index.php index.html index.htm default.php default.html default.htm </Directory> </VirtualHost> <VirtualHost *:443> ServerAdmin webmaster@example.com DocumentRoot "/www/wwwroot/mysite.com/" ServerName SSL.mysite.com ServerAlias mysite.com #errorDocument 404 /404.html ErrorLog "/www/wwwlogs/mysite.com-error_log" CustomLog "/www/wwwlogs/mysite.com-access_log" combined # Use Cloudflare's 'CF-Connecting-IP' header to get the real client IP RemoteIPHeader CF-Connecting-IP # Define trusted proxies (Cloudflare IP ranges) RemoteIPTrustedProxy 103.21.244.0/22 RemoteIPTrustedProxy 103.22.200.0/22 RemoteIPTrustedProxy 103.31.4.0/22 RemoteIPTrustedProxy 104.16.0.0/13 RemoteIPTrustedProxy 104.24.0.0/14 RemoteIPTrustedProxy 108.162.192.0/18 RemoteIPTrustedProxy 131.0.72.0/22 RemoteIPTrustedProxy 141.101.64.0/18 RemoteIPTrustedProxy 162.158.0.0/15 RemoteIPTrustedProxy 172.64.0.0/13 RemoteIPTrustedProxy 173.245.48.0/20 RemoteIPTrustedProxy 188.114.96.0/20 RemoteIPTrustedProxy 190.93.240.0/20 RemoteIPTrustedProxy 197.234.240.0/22 RemoteIPTrustedProxy 198.41.128.0/17 #SSL SSLEngine On SSLCertificateFile /www/server/panel/vhost/cert/mysite.com/fullchain.pem SSLCertificateKeyFile /www/server/panel/vhost/cert/mysite.com/privkey.pem SSLCipherSuite EECDH+CHACHA20:EECDH+CHACHA20- draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5 SSLProtocol All -SSLv2 -SSLv3 -TLSv1 SSLHonorCipherOrder On #DENY FILES <Files ~ (\.user.ini|\.htaccess|\.git|\.env|\.svn|\.project|LICENSE|README.md)$> Order allow,deny Deny from all </Files> #PHP <FilesMatch \.php$> SetHandler "proxy:unix:/tmp/php-cgi-83.sock|fcgi://localhost" </FilesMatch> #PATH <Directory "/www/wwwroot/mysite.com"> SetOutputFilter DEFLATE Options FollowSymLinks AllowOverride All Require all granted DirectoryIndex index.php index.html index.htm default.php default.html default.htm </Directory> </VirtualHost> if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } sudo systemctl restart apache2 Create a test php file <?php // Show the IP address as seen by the server echo 'Real IP from CF-Connecting-IP: ' . $_SERVER['REMOTE_ADDR'] . '<br>'; // Show the X-Forwarded-For header (if available) if (isset($_SERVER['HTTP_CF_CONNECTING_IP'])) { echo 'CF-Connecting-IP: ' . $_SERVER['HTTP_CF_CONNECTING_IP'] . '<br>'; } // Display X-Forwarded-For header if it exists if (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) { echo 'X-Forwarded-For: ' . $_SERVER['HTTP_X_FORWARDED_FOR'] . '<br>'; } ?> if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } This is EXAMPLE for NGINX server { listen 80; listen 443 ssl http2; server_name some.tld; index index.php index.html index.htm default.php default.htm default.html; root /www/wwwroot/some.tld/public; set_real_ip_from 103.21.244.0/22; set_real_ip_from 103.22.200.0/22; set_real_ip_from 103.31.4.0/22; set_real_ip_from 104.16.0.0/12; set_real_ip_from 108.162.192.0/18; set_real_ip_from 131.0.72.0/22; set_real_ip_from 141.101.64.0/18; set_real_ip_from 162.158.0.0/15; set_real_ip_from 172.64.0.0/13; set_real_ip_from 173.245.48.0/20; set_real_ip_from 188.114.96.0/22; set_real_ip_from 190.93.240.0/22; set_real_ip_from 197.234.240.0/22; set_real_ip_from 198.41.128.0/17; real_ip_header X-Forwarded-For; real_ip_recursive on; ..... etc config here } if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); }

Hello, this is the extension that is enabled by default /www/server/apache/conf/httpd.conf: LoadModule remoteip_module modules/mod_remoteip.so aaP_clous

aaPanel_Kern Hello, this is the extension that is enabled by default /www/server/apache/conf/httpd.conf: LoadModule remoteip_module modules/mod_remoteip.so You mean it's installed by default 'mod_remoteip'' ? I inserted this code into the domain config (picture below) but there are no changes. I restarted the server 2 days ago and I still see Cloudflare IP addresses from my users visiting website.

Will %h replace with %{CF-Connecting-IP}i restart apache Or add %{CF-Connecting-IP}i before %h , restart apache aaP_clous

aaPanel_Kern Will %h replace with %{CF-Connecting-IP}i restart apache Or add %{CF-Connecting-IP}i before %h , restart apache Unfortunately I don't have that part in my Config file. This is my Config file: <VirtualHost *:80> ServerAdmin webmaster@example.com DocumentRoot "/www/wwwroot/mysite.com" ServerName 0efe0d19.mysite.com ServerAlias mysite.com #errorDocument 404 /404.html ErrorLog "/www/wwwlogs/mysite.com-error_log" CustomLog "/www/wwwlogs/mysite.com-access_log" combined RemoteIPHeader CF-Connecting-IP RemoteIPTrustedProxy 103.21.244.0/22 RemoteIPTrustedProxy 103.22.200.0/22 RemoteIPTrustedProxy 103.31.4.0/22 RemoteIPTrustedProxy 104.16.0.0/13 RemoteIPTrustedProxy 104.24.0.0/14 RemoteIPTrustedProxy 108.162.192.0/18 RemoteIPTrustedProxy 131.0.72.0/22 RemoteIPTrustedProxy 141.101.64.0/18 RemoteIPTrustedProxy 162.158.0.0/15 RemoteIPTrustedProxy 172.64.0.0/13 RemoteIPTrustedProxy 173.245.48.0/20 RemoteIPTrustedProxy 188.114.96.0/20 RemoteIPTrustedProxy 190.93.240.0/20 RemoteIPTrustedProxy 197.234.240.0/22 RemoteIPTrustedProxy 198.41.128.0/17 #DENY FILES <Files ~ (\.user.ini|\.htaccess|\.git|\.env|\.svn|\.project|LICENSE|README.md)$> Order allow,deny Deny from all </Files> #PHP <FilesMatch \.php$> SetHandler "proxy:unix:/tmp/php-cgi-83.sock|fcgi://localhost" </FilesMatch> #PATH <Directory "/www/wwwroot/mysite.com"> SetOutputFilter DEFLATE Options FollowSymLinks AllowOverride All Require all granted DirectoryIndex index.php index.html index.htm default.php default.html default.htm </Directory> if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } </VirtualHost> <VirtualHost *:443> ServerAdmin webmaster@example.com DocumentRoot "/www/wwwroot/mysite.com/" ServerName SSL.mysite.com ServerAlias mysite.com #errorDocument 404 /404.html ErrorLog "/www/wwwlogs/mysite.com-error_log" CustomLog "/www/wwwlogs/mysite.com-access_log" combined #SSL SSLEngine On SSLCertificateFile /www/server/panel/vhost/cert/mysite.com/fullchain.pem SSLCertificateKeyFile /www/server/panel/vhost/cert/mysite.com/privkey.pem SSLCipherSuite EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5 SSLProtocol All -SSLv2 -SSLv3 -TLSv1 SSLHonorCipherOrder On #PHP <FilesMatch \.php$> SetHandler "proxy:unix:/tmp/php-cgi-83.sock|fcgi://localhost" </FilesMatch> #DENY FILES <Files ~ (\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)$> Order allow,deny Deny from all </Files> #PATH <Directory "/www/wwwroot/mysite.com/"> SetOutputFilter DEFLATE Options FollowSymLinks AllowOverride All Require all granted DirectoryIndex index.php index.html index.htm default.php default.html default.htm </Directory> if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } </VirtualHost>

I inserted the code where you said (picture below) and I have no changes, I still see members of the website with the Cloudflare IP address.

Is the apache restarted? Is the domain name passed through Cloudfalre's proxy?

I restarted the server. The domain name is routed through Cloudflare Proxy.

This is caused by repeated configuration aaP_clous

Okay, I'll delete that part and let you know here.

mod_remoteip

aaP_clous

aaPanel_Kern I already have that set in the domain config.

aaP_clous .. and website config file:
https://codeishot.com/11ovtxbw

I put the whole code there and you can see that I have it set up. Now I put your whole code in the domain config, restarted the server and the same thing happens again, I see all the members via Cloudflare IP addresses.

aaPanel_Kern

Hello, I logged in to your aapanel and found that I already had a normal user IP
It is recommended that you check the IP carefully

aaP_clous

aaPanel_Kern aapanel is not through Cloudflare Proxy, the website I own uses Cloudflare proxy.

aaPanel_Kern

Your website has been successfully set up and the IP addressed by the user is displayed. Please check it yourself

aaP_clous

« Previous Page