[squid-users] Logging of 'indirect' requests, e.g. involving NAT or VPN

[Henry S. Thompson]

Leonardo Rodrigues writes:

> Em 24/06/15 15:28, Henry S. Thompson escreveu:
>> I've searched the documentation and mailing list archives w/o success,
>> and am not competent to read the source, so asking here: what is
>> logged as the 'remotehost' in Squid logs when a request that has been
>> encapsulated, as in from a machine on a local network behind a router
>> implementing NAT, or from a machine accessing the proxy via a VPN
>> connection?
>
>     logs will show the IP address that reached squid, ie. the source
> address of the connection. If that was NATted, squid will never know
> (and thus is not able to log) the original address before the NAT.

That's what I assumed, but in a log I've been working with for
research purposes, 192.168.... turns up -- how is this possible given
what you say?

ht
-- 
       Henry S. Thompson, School of Informatics, University of Edinburgh
      10 Crichton Street, Edinburgh EH8 9AB, SCOTLAND -- (44) 131 650-4440
                Fax: (44) 131 650-4587, e-mail: ht at inf.ed.ac.uk
                       URL: http://www.ltg.ed.ac.uk/~ht/
 [mail from me _always_ has a .sig like this -- mail without it is forged spam]