Re: [squid-users] IP passthrough the cache

YOu have to talk to the webmaster of this site to have them explain
how/when they use the X-Forwarded-For header. Seems they for some
unknown reason only use this header for certain browser types.

Regards
Henrik

On Tuesday 28 January 2003 10.09, Laurent HENRY wrote:
> Hi,
> you are right. With MS stations my access is granted, with
> others not I took very different stations to try to solve my
> problem, i don't find any clue about my problem.
> So, looking at the devel.squid-cache-cache.org/cgi-bin/test url,
> the results are the same for any station: the x-forwarded field is
> everytime correct whatever i'll be granted accessor not!
>
> I try with different browser. I have these results:
> WinXP with IE 6.0.2: ok
> the same with Netscape 4.7: not ok
> win 98 with Netscape 4.7
> the same + IE 4.72: not ok
> MacOS 10.2 + IE 5.2 and Netscape 4.5 not ok
> MacOS 9xx + Netscape 4.5 and IE 5.01: not ok
> Linux suse 8.1 + netscape 7.0 not ok
> Everytime i have:
> Source address: Ip how my squid proxy
> via: name of my proxy + squid version (Squid/2.3.stable4-hno.cvs)
> forwarded from: the ip of the workstation
>
> I know it is not supposed to have different results with differents
> browsers on the same system, i find it more than weird too
>
> One more precision, with i'm telling "access granted", i mean the
> foreign restricted website recognize (i don't know how...) the IP
> of my workstation and all go on well.
> When access is not granted it gives me the IP of my proxy and
> telling me an access denied banner.
>
> these are all the elements in my possession! i have no more new
> idea to try to explain how this happens!
>
> Le Mardi 28 Janvier 2003 00:14, Colin Campbell a écrit :
> > Hi,
> >
> > On Fri, 24 Jan 2003 13:55:25 +0100
> >
> > Laurent HENRY <laurent.henry@ehess.fr> wrote:
> > > i didn't know this URL, thank you !
> > > It reports good parameters:
> > > source address: IP of my proxy
> > > forwarded from: my IP
> > > ...but the website send me back the IP of my proxy and deny me
> > > access. I'll need to test it on the MS workstations to find
> > > what it answers (i insists, sometimes it recognizes the IP
> > > instead of the squid's IP! )
> > >
> > > Thank you for the examples, i don't need other one than NAT to
> > > tell it is a strange method of filtering...
> >
> > This is a bit out of left field and I haven't been following that
> > closely but I'll throw in my thoughts anyway :-)
> >
> > If I remember correctly, your MS workstations, going through
> > squid work fine. Other machines, going through the same squid
> > don't. Are they all running the same browser? Has this come down
> > to the MS boxes run IE and work while everything else, running
> > other browsers fails?
> >
> > Colin
> > --
> > Colin Campbell
> > Unix Support/Postmaster/Hostmaster
> > CITEC
> > +61 7 3227 6334
Received on Tue Jan 28 2003 - 02:54:05 MST