Added TrustedProxies parameter

[InterN0te]

Added TrustedProxies parameter in settings :

For requests from these IPs, the shield will use the IP in X-Forwarded-For (if defined) to identify the client to block and thus avoid blocking the proxy server IP

[InterN0te]

Added the real client IP as ClientID in Context and used this for IP abuse count/block/ban :

func ClientRealIP(next http.Handler)

func ClientRealIP(next http.Handler) http.Handler {
    return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		clientID := GetClientIP(r)
		if(clientID == ""){
			http.Error(w, "Invalid request", http.StatusBadRequest)
			return
		}

		ctx := context.WithValue(r.Context(), "ClientID", clientID)
		r = r.WithContext(ctx)

        next.ServeHTTP(w, r)
    })
}

Use Real Client IP

func BlockByCountryMiddleware(blockedCountries []string, CountryBlacklistIsWhitelist bool) func(http.Handler) http.Handler {
	return func(next http.Handler) http.Handler {
		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
			ip, ok := r.Context().Value("ClientID").(string)
			if !ok {
				http.Error(w, "Invalid request", http.StatusBadRequest)
				return
			}
[...]
}

(103.X.X.135 is my trusted proxy that can no longer be blocked)

[InterN0te]

Using IPInRange in IsTrustedProxy
SplitIP put back in shield (this is not a problem with a standard forwarded-for header)
Modified IPInRange to allow comparison of 2 valid IPs