Thread:Project:Support desk/Using a range of IP addresses within $wgSquidServers/reply (2)

Hi Ciencia, I understand this. My claim is not that the array can't accept more than one value. The claim is that a value cannot be a network definition or a range of IP addresses - it can only be a single IP address.

A solution for this (if it is currently the way thing works, e.g. by design), in my view, can be either or both: 1. Make $wgUsePrivateIPs work by itself, not dependent on $wgSquidServers presence, and each session that has a XFF flag - will be processed and the session's IP will be determined by the XFF flag. This can also be set by a new directive, base on $wgUsePrivateIPs, say $wgUsePrivateIPsAllowAnyProxyServer - so this way we will have two options - one will enforce using of trusted proxy servers and one will be open to any proxy server. To complete this solution - admins can limit access to the wiki using allow/deny directives in the .htaccess file of the site, so only allowed proxy servers can connect to the site. 2. Enhance $wgSquidServers (and of course $wgSquidServersNoPurge) to accept values that are either ip range (x-y) or subnet definition (either 1.2.0.0 netmask 255.255.255.0 or as 1.2.0.0/24 (CIDR)).