Re: [squid-users] users proxy IP

Daniel Barron wrote:

> a) modify the log setting so that it logs the results from an XFF entry and
> this can be in addition or in replacement for the source ip entry.

Requires changes to the C code.
You are welcome to add the code required, but please keep in mind that
headers can easily be forged so the header should not be seen as more
than advisory.

> b) set up ACLs according to the X-Forwarded-For header value.
>
> How do I do this? I've looked at the FAQ and not found the answer and had
> a look at quite a few mailing list archive entries with the word 'forwarded'
> in and not found the answer. Infact this is how I came to this email that
> is quoted. I've also looked at the squid.conf and not seen a way to do this.
> Also the ACL information in the FAQ suggests that b) is impossible.

This too requires changes to the C code, but not very much.

Regards
Henrik Nordström
Squid Hacker
Received on Sat Nov 10 2001 - 04:39:09 MST