varnish and csf / lfd

[kernow]

Have installed varnish cache but now notice lfd logs say mod_security rules are triggered by servers own IP address so will be ignored. Any way to get csf/lfd to list the real IPs so they can be blocked?

[Elizine]

Check the apache error log for that IP, it should tell you what rule ID(s) was/were violated.

[kernow]

lfd is reporting the rule IDs but now shows the servers IP instead of the real IP