Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

reverse proxy behind apache

27 views
Skip to first unread message

spiazzi

unread,
Jul 12, 2005, 4:50:10 PM7/12/05
to
I've a reverse proxy behind apache webserver 2.x.
The reverse proxy add a HTTP Header parameter with the ip of the client that
make the request.
Apache log the request IP as the IP of the reverse proxy.
There is a method to rewrite the IP with the HTTP Header parameter or log
this parameter?

HansH

unread,
Jul 12, 2005, 5:39:24 PM7/12/05
to
"spiazzi" <spia...@netscape.net> schreef in bericht
news:62WAe.61780$h5.26...@news3.tin.it...
This does about your tric for me:
SetEnvIfNoCase X-FORWARDED-FOR "." proxy
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" -
(%{zip}n) %D" extended
LogFormat "%{X-FORWARDED-FOR}i %l %u %t \"%r\" %>s %b \"%{Referer}i\"
\"%{User-Agent}i\" (%h) (%{zip}n) %D" extended-proxy
CustomLog /path/access_log extended env=!proxy
CustomLog /path/access_log extended-proxy env=proxy

HansH


spiazzi

unread,
Jul 12, 2005, 5:59:59 PM7/12/05
to
I've heard about rpaf module.
Do you now?

"HansH" <ha...@niet.op.het.net> ha scritto nel messaggio
news:42d4390d$0$24000$e4fe...@news.xs4all.nl...

HansH

unread,
Jul 12, 2005, 6:32:29 PM7/12/05
to

"spiazzi" <spia...@netscape.net> schreef in bericht
news:z3XAe.62000$h5.26...@news3.tin.it...
No,but some friends at Google's does
http://freshmeat.net/projects/rpaf/
" It changes the remote address of the client visible to other Apache
modules when two conditions are satisfied. First condition is that the
remote client is actually a proxy that is defined in httpd.conf. Secondly if
there is an incoming X-Forwarded-For header and the proxy is in it's list of
known proxies it takes the last IP from the incoming X-Forwarded-For header
and changes the remote address of the client in the request structure. "

Does has the sound of solving your problem.

HansH


spiazzi

unread,
Jul 13, 2005, 3:03:19 PM7/13/05
to
I think yes.

"HansH" <ha...@niet.op.het.net> ha scritto nel messaggio

news:42d4457d$0$24102$e4fe...@news.xs4all.nl...

0 new messages