HTTP IP spoofing detection

[ik]

Hello,

I'm trying to detect a layer 7 based HTTP request, and see if it
contain headers that provided as spoofed IP address.
Is there a way to detect what is the Ethernet that the request arrived
from at apace level ?

If so, how can I provide rules what to do according to an HTTP header fields ?

Thanks,
Ido