Re: freebsd-isp Digest, Vol 117, Issue 4

From: Abu Khaled (khaled.abu_at_gmail.com)
Date: 06/16/05

  • Next message: mailmarshal_at_brighthouse.nl: "Your email message was blocked" 
    Date: Thu, 16 Jun 2005 17:23:43 +0300
To: Remy de Ruysscher <remy@unix-asp.com>

    On 6/16/05, Remy de Ruysscher <remy@unix-asp.com> wrote:
    > Hi there,
    >
    > I'm struggeling with the setup of Reverse Proxy (Squid) for our
    > serverfarm. Is it possible to preserve the orginal IP address
    > in the logs on the destinator webserver (Apache access-logs). If not all
    > connections are comming from the Squid Proxy.
    >
    > If seen a number of patches for Squid, but haven't dived into it yet.
    > Any tips on this matter are most welcome ;).
    >
    > Regards,
    >
    > Remy.
    >
    >
    >

    I found this sometime ago while trying to configure my apache log files.

    Check apache mod_log_config documentation.
    http://httpd.apache.org/docs/mod/mod_log_config.html

    Inserting X-Forwarded-For for apache access-logs might help.
    # start
    LogFormat "%v %{X-Forwarded-For}i %l %u %t \"%r\" %>s %b" common
    CustomLog logs/access_log common
    # end 

    -- 
Kind regards
Abu Khaled
_______________________________________________
freebsd-isp@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-isp
To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
  • Next message: mailmarshal_at_brighthouse.nl: "Your email message was blocked"

    Relevant Pages

    • Reverse proxy question
      ... with 1G Ram, 30G hard drive space, and varied CPU configurations. ... I realize that Squid relies more on disk seek times than actual ... if anyone knows of a reverse proxy that may be able to do better ... seen online indicate I may need to improve squid by a factor of 10. ...
      (freebsd-questions)
    • Re: Does softupdate help squid ?
      ... Christopher Sean Hilton wrote: ... both forward and reverse proxy. ... I did not know that varnish cannot be ... But, as you point out, it seems a more specific than Squid (or squid ...
      (freebsd-questions)
    • Securing a webserver through reverse proxy?
      ... I've read about a way to secure webservers, ... exposed to the Internet, using a reverse proxy, e.g. MS ISA Server or ... Squid on a UNIX box. ... Squid reverse proxy solution fulfill that too? ...
      (Security-Basics)
    • Squid httpd acceleration acl bug enables portscanning
      ... Squid can be used to proxy and also portscan if set up as a httpd ... accelerator (reverse proxy). ... configuration so it is not vulnerable without making these configuration ...
      (Bugtraq)