Re: [squid-users] Reverse Proxy - Client IP

From: Marc Elsen <marc.elsen@dont-contact.us>
Date: Tue, 22 Apr 2003 12:27:51 +0200

Rob Slaughter wrote:
>
> I have configured Squid 2.4 as a transperant proxy across multiple
> domains. This works fine except I can not see the connecting clients ip
> at the destination server.
>
> I have had sniff through the FAQ ect and found some info on
> X-FORWARDED-FOR but are confused by the explanation of this.
> As its already part of squid and is default set to on.. Does this still
> require some additional patch or util so as the destination webserver
> see the requesting client IP as apposed to the proxy servers ip.
>
> Robert Slaughter.

 The X-FORWARDED-FOR is designed to give the ip client info
to the remote server,as you say.
Because of the connection being hacked, by the transp. proxy, it
is not possible to see the client ip at the ip layer at the
remote end of the connection.
Advanced tweaks for have been discussed on the list, but as I understand
it requires linux kernel patching, and some patch in the dev archives.
Guess not for the normal human being to play with or setup though.

M.

-- 
 'Love is truth without any future.
 (M.E. 1997)
Received on Tue Apr 22 2003 - 04:28:26 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:15:10 MST