SSH Failed Login Showing Proxy IP

Reported by: ImJT
Created: 1 month 7 hours ago
Views: 26

Hello! I am behind a NAT and that has caused all of my public IPs to show as my NAT. Is there a way around this to show their public IPs instead? This issue has caused me to disable Fail2Ban because it blocks the NAT and removes access for everyone. 

I used to have this same issue with my PHP projects, I resolved my issue by using the Apache mod_remoteip. This fix corrected the 'Apache Monitoring' tab so it now shows the correct addresses. Is there any work around for this that doesn't lead to me going through everything myself?

Examples:

mod_remoteip / apache2 conf:

RemoteIPHeader X-Forwarded-For

Failed logins:
git      ssh:notty    10.20.240.240    Thu May 16 10:04 - 10:04  (00:00)
git ssh:notty 10.20.240.240 Thu May 16 10:04 - 10:04 (00:00)
ftpuser ssh:notty 10.20.240.240 Thu May 16 10:04 - 10:04 (00:00)
jo ssh:notty 10.20.240.240 Thu May 16 10:04 - 10:04 (00:00)
ftpuser ssh:notty 10.20.240.240 Thu May 16 10:04 - 10:04 (00:00)
jo ssh:notty 10.20.240.240 Thu May 16 10:04 - 10:04 (00:00)
apple ssh:notty 10.20.240.240 Thu May 16 10:04 - 10:04 (00:00)
Write a reply Edit a reply