- check different request-header to determine the users IP
- block access if it cant be reliably deetermined
- increase field size in db to accomodate IPv6