location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://3.3.3.3;
}
<IfModule rpaf_module>
RPAFEnable On
RPAFheader X-Real-IP
RPAFproxy_ips 2.2.2.2 127.0.0.1
</IfModule>
deny from 1.1.1.1