This article describes how to use a data set to evaluate or check the IP address in the X-Forwarded-For header

Instructions

1. Add a policy dataset
   add policy dataset dataset_192_168 ipv4 
2. Bind a IP Range to the data set
   bind policy dataset dataset_192_168 192.168.0.0 -index 1 -endRange 192.168.255.255 
3. Configure responder policy
   add responder policy RST_XFF "HTTP.REQ.HEADER(\"x-forwarded-for\").Contains_ANY(\"dataset_192_168\")" RESET