```X-Forwarded-For``` should return always the original IP.
```
The general format of the field is:
X-Forwarded-For: client, proxy1, proxy2
where the value is a comma+space separated list of IP addresses, the left-most being the original client, and each successive proxy that passed the request adding the IP address where it received the request from. In this example, the request passed through proxy1, proxy2, and then proxy3 (not shown in the header). proxy3 appears as remote address of the request.
```

If this is the _validation_ it must be wrong...
This validation is breaking the original _X-Forwarded-For_ semantic...

The validation must be a new issue and not related to this PR... you cannot avoid the validation removing the original IP address.