When configuring Proxy Mode for Dynamic IP Address Restrictions in IIS 8, I am trying to figure out how to get the server toonly look at the X-Forwarded-For HTTP header if the traffic is coming from a known proxy. Otherwise it should use the standard network IP address of the client.
This article indicates that by adding the known proxies' IP addresses to the allowed list, the server will only look at the header if the client's IP address is in this list, and hence is coming from one of the known proxies.
My question is: does this assume that the default setting on the server is to 'Allow' unspecified clients, or 'Deny' unspecified clients? If 'Allow', then adding the proxies' addresses to the allowed list seems redundant. If 'Deny', then the server would deny all requests not coming from one of the known proxies, which is also not what I want.
Thanks in advance!