Re: configuring mod_proxy_ftp for client ip logging

[William A Rowe Jr <wrowe@xxxxxxxxxxxxx>]

Rereading your question, you are asking whether FTP protocol offers the equivalent of x-forwarded-for http header. 

The answer is, no, you can't accomplish what you are seeking. See https://devcentral.f5.com/questions/how-to-insert-client-ip-address-in-tcp-profile-for-ftp-connections and dozens of other posts asking the same question.

It's an entirely reasonable extension of FTP, which if it existed, mod_proxy_ftp could be enhanced to support.

On Jul 25, 2018 23:34, "William A Rowe Jr" <wrowe@xxxxxxxxxxxxx> wrote:

If I understand your question, mod_proxy_ftp does not speak ftp to the client; only between the httpd server and backend. So the only data channel is the one established by httpd to shuttle the data.

On Tue, Jul 24, 2018, 12:28 Harbo, Peter <pharbo@xxxxxxxxxxxxxxx> wrote:

The mod_proxy_ftp module is working fine for me using release 2.4.25 to send urls matching a pattern to a proftpd server running on the same system.  I have noticed that the source IP address in the ftpd log is the same as the httpd running the mod_proxy_ftp module.  Am I correct in assuming that neither mod_remoteip nor any other configuration options of httpd can cause httpd's ftp proxy module to spoof the IP address of the client sending the request to httpd?  Otherwise this works nicely but we need the correct IP addresses in the proftpd log for metrics.