RE: [users@httpd] Access_log shows incorrect remote host address

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



NAT would present this result. Perhaps they changed something on the
network end?

> -----Original Message-----
> From: Greg Jeziorski [mailto:greg@xxxxxxxxxxxxx]
> Sent: Wednesday, March 16, 2005 8:01 PM
> To: users@xxxxxxxxxxxxxxxx
> Subject: RE: [users@httpd] Access_log shows incorrect remote host
address
> 
> Floor,
> 
> That does make sense, and I am accessing the website from my external
> address. Apache has been logging the remote host address and not the
> router
> address for several years and now all of a sudden, it doesn't.  What's
> interesting is that the address of the router that is being logged is a
> private address in a different subnet from the private address of the
web
> server.  Is there any function/feature within Apache that causes it to
log
> the "previous hop" address and not the remote host?  The router is not
> doing
> any proxying, only NAT.  When things like this change for no apparent
> reason, I get concerned.
> 
> Thanks,
> Greg
> 
> -----Original Message-----
> From: FloorFLUX [mailto:floorflux@xxxxxxxxx]
> Sent: Wednesday, March 16, 2005 5:03 PM
> To: users@xxxxxxxxxxxxxxxx
> Subject: Re: [users@httpd] Access_log shows incorrect remote host
> address
> 
> 
> Greg,
> 
> When you access your webserver, are you using an external IP address?
> If so, It's going to log your hit as coming from your router no matter
> where it's coming from on the lan because your outgoing request is
> going through the router.  If you access it via an internal IP address
> (perhaps that's how you're doing it with the other applications), then
> your request doesn't go through the router, and your internal address
> will be preserved.
> 
> Let me know if that makes any sense or if it's inaccurate...
> 
> --Floor
> 
> 
> On Wed, 16 Mar 2005 15:49:30 -0700, greg@xxxxxxxxxxxxx
> <greg@xxxxxxxxxxxxx> wrote:
> > I'm running Apache 2.0.52 on Fedora Core 3.  I am running webalizer
and
> I
> noticed that a couple of days ago all httpd logs are reporting the same
IP
> address for the requesting host, the address of my router.  Logs from
> other
> applications (FTP, Sendmail) all report the correct address of remote
> host.
> If I telnet to port 80 from another server on the LAN, the httpd logs
show
> the address of the server.  I searched the FAQ and the archives but
didn't
> find anything like this.  Any thoughts/suggestions would be appreciated.
> >
> > Thanks,
> > Greg
> >
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP Server
> Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
> >   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
> >
> >
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>    "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
> 
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>    "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux