Re: [squid-users] X_FORWARDED_FOR, squid and apache cheating

From: howard chen <howachen_at_gmail.com>
Date: Sat, 24 May 2008 18:35:13 +0800

Hi

On Sat, May 24, 2008 at 11:42 AM, Amos Jeffries <squid3_at_treenet.co.nz> wrote:
> howard chen wrote:
>
> Okay, you will need to use the new X-Forwarded-For extensions recently added
> for 3.1 then. Which gives you a few extra manipulations of the XFF header,
> the 'truncate' setting does what you want.
>

Thanks for your reply.

This seems to be what I want!

However, I have downloaded and installed "Squid Cache: Version
3.HEAD-20080424", and in the config, I set

forwarded_for truncate

However, I still see my cheated XFF exist in my backend PHP program, e.g.

[HTTP_X_FORWARDED_FOR] => 192.168.11.103 [Cheated using FF Modify Header]
[REMOTE_ADDR] => MY_SQUID_IP

(I know I might need to do a TCP dump in my apache server, hopefully tomorrow.)

Thanks anyway.

Howard
Received on Sat May 24 2008 - 10:35:16 MDT

This archive was generated by hypermail 2.2.0 : Tue Aug 05 2008 - 01:05:14 MDT