RSFirewall tries to identify the original IP address by looking at different HTTP headers. A bypass is possible due to the way it is implemented.CreditsDaniel RufReferenceshttps://wpscan.com/vulnerability/c0ed80c8-ebbf-4ed9-b02f-31660097c352