Discussion:
[squid-users] X-Forwarded-For
Michael Pelletier
2018-11-09 20:05:24 UTC
Permalink
Hello,
I am running squid 3.5.28 and for some reason I can not get X-Forwarded-For
added to the http headers. I have "forwarded_for on" and "via on" set in
the squid.conf. Any ideas why this will not work?
--
*Disclaimer: *Under Florida law, e-mail addresses are public records.
If you do not want your e-mail address released in response to a public
records request, do not send electronic mail to this entity. Instead,
contact this office by phone or in writing.
Amos Jeffries
2018-11-10 00:34:59 UTC
Permalink
Post by Michael Pelletier
Hello,
I am running squid 3.5.28 and for some reason I can not get
X-Forwarded-For added to the http headers. I have "forwarded_for on" and
"via on" set in the squid.conf. Any ideas why this will not work?
Perhapse your Squid has been patched to remove it ?

Perhapse you are looking at the wrong headers ?
X-Forwarded-For is only added to the request headers sent to servers.

Perhapse you have a later config line setting forwarded_for to "delete"
or "transparent" ?

Amos
Michael Pelletier
2018-11-10 02:15:35 UTC
Permalink
Perhapse your Squid has been patched to remove it ?

I am running 3.5.28. I have not installed any patches.

Perhapse you are looking at the wrong headers ?
X-Forwarded-For is only added to the request headers sent to servers.

Yes. The XFF should be added to the request header and be seen by the
server the proxy is communicating with. I have a sniffer on the outside
(Internet side) of the proxy and have confirmed the XFF is not being added.

Perhapse you have a later config line setting forwarded_for to "delete"
or "transparent" ?

I have the line "forwarded_for on"
Post by Amos Jeffries
Post by Michael Pelletier
Hello,
I am running squid 3.5.28 and for some reason I can not get
X-Forwarded-For added to the http headers. I have "forwarded_for on" and
"via on" set in the squid.conf. Any ideas why this will not work?
Perhapse your Squid has been patched to remove it ?
Perhapse you are looking at the wrong headers ?
X-Forwarded-For is only added to the request headers sent to servers.
Perhapse you have a later config line setting forwarded_for to "delete"
or "transparent" ?
Amos
_______________________________________________
squid-users mailing list
http://lists.squid-cache.org/listinfo/squid-users
--
*Disclaimer: *Under Florida law, e-mail addresses are public records.
If you do not want your e-mail address released in response to a public
records request, do not send electronic mail to this entity. Instead,
contact this office by phone or in writing.
Amos Jeffries
2018-11-10 02:53:57 UTC
Permalink
Post by Amos Jeffries
Perhapse your Squid has been patched to remove it ?
I am running 3.5.28. I have not installed any patches.
Perhapse you are looking at the wrong headers ?
 X-Forwarded-For is only added to the request headers sent to servers.
Yes. The XFF should be added to the request header and be seen by the
server the proxy is communicating with. I have a sniffer on the outside
(Internet side) of the proxy and have confirmed the XFF is not being added.
Perhapse you have a later config line setting forwarded_for to "delete"
or "transparent" ?
I have the line "forwarded_for on"
I mean something later in the config. This directive can be set multiple
times and only uses the last value it is set to.


Another possibility is request_header_access rules removing it along
with other headers. IIRC, this header is included in one of the "Other"
or "All" categories.


Amos
Michael Pelletier
2018-11-10 17:27:54 UTC
Permalink
Interesting. I will check later. Thanks!
Post by Michael Pelletier
Post by Amos Jeffries
Perhapse your Squid has been patched to remove it ?
I am running 3.5.28. I have not installed any patches.
Perhapse you are looking at the wrong headers ?
X-Forwarded-For is only added to the request headers sent to servers.
Yes. The XFF should be added to the request header and be seen by the
server the proxy is communicating with. I have a sniffer on the outside
(Internet side) of the proxy and have confirmed the XFF is not being
added.
Post by Amos Jeffries
Perhapse you have a later config line setting forwarded_for to "delete"
or "transparent" ?
I have the line "forwarded_for on"
I mean something later in the config. This directive can be set multiple
times and only uses the last value it is set to.
Another possibility is request_header_access rules removing it along
with other headers. IIRC, this header is included in one of the "Other"
or "All" categories.
Amos
--
*Disclaimer: *Under Florida law, e-mail addresses are public records.
If you do not want your e-mail address released in response to a public
records request, do not send electronic mail to this entity. Instead,
contact this office by phone or in writing.
Continue reading on narkive:
Loading...