added x_forward_for to list of ips to pull