## M5 AFTER the release (0.286.1 on demo-hp: traefik trusts 172.16.253.2 only), from DooPlex public 37.191.56.193 — plain, 2026-10-01T19:50:56Z
RemoteAddr: 172.18.0.3:59296
Cf-Connecting-Ip: 37.191.56.193
X-Forwarded-For: 37.191.56.193, 172.16.253.2
X-Forwarded-Port: 443
X-Forwarded-Proto: https
X-Forwarded-Server: ca3fb49f8b7d
X-Real-Ip: 172.16.253.2
## M5 AFTER the release (0.286.1 on demo-hp: traefik trusts 172.16.253.2 only), from DooPlex public 37.191.56.193 — forged: XFF 6.6.6.6, X-Real-IP 8.8.4.4, True-Client-IP 9.9.9.9, X-Forwarded-Host evil.example, X-Forwarded-Port 8443, X-Forwarded-Proto http, Forwarded for=5.5.5.5
RemoteAddr: 172.18.0.3:59296
Cf-Connecting-Ip: 37.191.56.193
X-Forwarded-For: 6.6.6.6,37.191.56.193, 172.16.253.2
X-Forwarded-Port: 443
X-Forwarded-Proto: https
X-Forwarded-Server: ca3fb49f8b7d
X-Real-Ip: 172.16.253.2
## M5 AFTER the release (0.286.1 on demo-hp: traefik trusts 172.16.253.2 only), from DooPlex public 37.191.56.193 — forged CF-Connecting-IP 7.7.7.7 alone: HTTP 403 (Cloudflare's edge answers; the request never reaches the box)
