[squid-users] Log proxy hostname along with HTTP access URI

Peter Oruba peter at decycive.com
Tue Feb 24 14:40:38 UTC 2015


Thanks, Brendan, but unfortunately I don’t have access to the NAT configuration.

> Am 24.02.2015 um 15:37 schrieb Brendan Kearney <bpk678 at gmail.com>:
> 
> On Tue, 2015-02-24 at 15:04 +0100, Peter Oruba wrote:
>> Hello everybody,
>> 
>> 
>> I’d like to distinguish multiple clients that are behind NAT from
>> Squid’s perspective. Proxy authentication or sessions are not an
>> option for different reasons and the idea that came up was to assign
>> each client a unique hostname through which Squid would be addressed
>> (e.g. UUID1.proxy.example.com and UUID2.proxy.example.com) A DNS
>> wildcard entry *.proxy.example.com would make sure each proxy referral
>> points to the same machine. Question: Is there a way to let Squid log
>> the DNS name through which a client referred to it? I was not able to
>> find any example in this regard and I assume that the proxy hostname
>> is „lost“ after the client's DNS lookup and that the client-proxy
>> connection is established.
>> 
>> 
>> Thanks,
>> Peter
>> 
>> 
>> _______________________________________________
>> squid-users mailing list
>> squid-users at lists.squid-cache.org
>> http://lists.squid-cache.org/listinfo/squid-users
> 
> with the below directives, you can avoid all of this grief and reference
> the client ip address where you need to.  just be sure the NAT adds the
> XFF header.
> 
> #  TAG: follow_x_forwarded_for
> #  TAG: acl_uses_indirect_client        on|off
> #  TAG: delay_pool_uses_indirect_client on|off
> #  TAG: log_uses_indirect_client        on|off
> #  TAG: tproxy_uses_indirect_client     on|off
> 
> 



More information about the squid-users mailing list