Chapter 3: Condition Reference
proxy.address=
Tests the destination address of the arriving IP packet. The expression can include an IP address or subnet, or the label of a subnet definition block.
If the transaction was explicitly proxied, then proxy.address= tests the IP address the client used to reach the proxy, which is either the IP address of the NIC on which the request arrived or a virtual IP address. This is intended for situations where the proxy has a range of virtual IP address; you can use proxy.address= to test which virtual IP address was used to reach the proxy.
If the transaction was transparently proxied, then proxy.address= tests the destination address contained in the IP packet. Note that this test may not be equivalent to testing the server_url.address. The server_url.address and proxy.address conditions test different addresses in the case where a proxied request is transparently intercepted: server_url.address= contains the address of the origin server, and proxy.address= contains the address of the upstream proxy through which the request is to be handled.
Note: proxy.card= functions correctly for transparent transactions.
Replaces: proxy_address=
Syntax
proxy.address=ip_addresssubnetsubnet_label
where:
•
•
•
Layer and Transaction Notes
•Use in <Admin>, <Proxy>, and <Forward> layers.
•Applies to proxy transactions.
Examples
;Service should be denied through proxy within the subnet 1.2.3.x. <proxy>
proxy.address=1.2.3.0/24 deny
See Also
•Conditions: client.address=, client.protocol=, proxy.card=, proxy.port=
•Definitions: define subnet
109
