Andreas Jung wrote: > Is this protection optional or mandatory? If mandatory, then -1 because > there are enough organizations running load-balanced proxies where > the source IP can change from time to time. Nah, it should be optional of course. But default, I think.