[squid-users] Forwarded-for functionality(squid)

[piyush.gaba at orange.com]

Hi Matus,

Thank you for your reply.

I think my whole struggle is to get the desired output as:
<ip>- - [17/Aug/2018:08:43:29 +0200] "GET /index1.html HTTP/1.1" 200 36 "-" "curl/7.29.0" unknown

Which has "unknown" at the end because forwarded_for was set to "off".

But now when I am working with squid 4.13 I am not getting the desired output, I am getting the output as,
<ip> - - [08/Sep/2020:15:07:19 +0200] "GET /index1.html HTTP/1.1" 200 8 "-" "curl/7.29.0"

Which does not have anything at the end, while the forwarded_for is set to "off".

Please let me know if you have any advice to give for this logging problem.

I am using below log format in my httpd file,
LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined

Bien cordialement,
Piyush Gaba
Software Engineer
TGI/OLN- INDIA
Tower B, 8th Floor, DLF Infinity Towers, 
DLF Cyber City Phase - II
Gurgaon - 122002, Haryana, INDIA
 [Email] piyush.gaba at orange.com


-----Original Message-----
From: squid-users [mailto:squid-users-bounces at lists.squid-cache.org] On Behalf Of Matus UHLAR - fantomas
Sent: Tuesday, September 8, 2020 15:23
To: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] Forwarded-for functionality(squid)

On 08.09.20 09:01, piyush.gaba at orange.com wrote:
>I would like to ask for your inputs/resolution for one of the issues that I am facing while using forwarded_for functionality with new version of squid i.e. v4.13
>
>UseCase:
>I have a client, a webserver and squid hosted in 3 different VMs.  I have
> set up interfaces in such a way that Client cannot access webserver
> directly, but only through squid proxy.(Works fine)
>
>Now, When I append forwarded_for off to my squid.conf and then curl the
> webserver from client [ curl {Webserver.mgmtIP} ], the expected logs on
> webserver should have, "unknown" at the end of line.

You can configure webserver to log contents of X-Forwarded-For: line.
Note that that line can contain anything clients can send.
So, unless you really want to see that content, don't log it.

>And if there is nothing appended or forwarded_for on is appended, it should have "Client_IP" at the end of the line in log file.
>But I am not getting expected output.


-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
He who laughs last thinks slowest.
_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.