[squid-users] acl follow_x_forwarded_for

[Antony Stone]

On Monday 03 July 2023 at 11:46:20, robert k Wild wrote:

> hi all,
> 
> im reading this acl
> 
> http://www.squid-cache.org/Doc/config/follow_x_forwarded_for/
> 
> is this to fool the dst server to think its coming from the client pc
> instead of squid proxy

No; it tells Squid to accept connection requests from other proxies which 
present the correct X-Forwarded-For header:

"If a request reaches us from a source that is allowed by this directive, then 
we trust the information it provides regarding the IP of the client it 
received from (if any)."


Antony.

-- 
Wanted: telepath.   You know where to apply.

                                                   Please reply to the list;
                                                         please *don't* CC me.