Make sure that every Option X-Forwarded-For
in the configuration is closed by an Option NoX-Forwarded-For
If this is not done correctly, the IP of the end-user-browser gets transmitted to the resource provider. They may use it to check for a subscription, which it may not have.
See the description of Option X-Forwarded-For