RE: [users@httpd] Access_log shows incorrect remote host address

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



It appears that it was something in the router. After logging in to the
router and rebooting it, the logs are again correct. I still don't
understand why it worked correctly for 3+ years and then changed suddenly.
 Thanks to all for the suggestions.  If anyone knows if there is a way for
apache itself to do this please let me know.

Thanks,
G

> NAT would present this result. Perhaps they changed something on the
> network end?
>
>> -----Original Message-----
>> From: Greg Jeziorski [mailto:greg@xxxxxxxxxxxxx]
>> Sent: Wednesday, March 16, 2005 8:01 PM
>> To: users@xxxxxxxxxxxxxxxx
>> Subject: RE: [users@httpd] Access_log shows incorrect remote host
> address
>>
>> Floor,
>>
>> That does make sense, and I am accessing the website from my external
>> address. Apache has been logging the remote host address and not the
>> router
>> address for several years and now all of a sudden, it doesn't.  What's
>> interesting is that the address of the router that is being logged is a
>> private address in a different subnet from the private address of the
> web
>> server.  Is there any function/feature within Apache that causes it to
> log
>> the "previous hop" address and not the remote host?  The router is not
>> doing
>> any proxying, only NAT.  When things like this change for no apparent
>> reason, I get concerned.
>>
>> Thanks,
>> Greg
>>
>> -----Original Message-----
>> From: FloorFLUX [mailto:floorflux@xxxxxxxxx]
>> Sent: Wednesday, March 16, 2005 5:03 PM
>> To: users@xxxxxxxxxxxxxxxx
>> Subject: Re: [users@httpd] Access_log shows incorrect remote host
>> address
>>
>>
>> Greg,
>>
>> When you access your webserver, are you using an external IP address?
>> If so, It's going to log your hit as coming from your router no matter
>> where it's coming from on the lan because your outgoing request is
>> going through the router.  If you access it via an internal IP address
>> (perhaps that's how you're doing it with the other applications), then
>> your request doesn't go through the router, and your internal address
>> will be preserved.
>>
>> Let me know if that makes any sense or if it's inaccurate...
>>
>> --Floor
>>
>>
>> On Wed, 16 Mar 2005 15:49:30 -0700, greg@xxxxxxxxxxxxx
>> <greg@xxxxxxxxxxxxx> wrote:
>> > I'm running Apache 2.0.52 on Fedora Core 3.  I am running webalizer
> and
>> I
>> noticed that a couple of days ago all httpd logs are reporting the same
> IP
>> address for the requesting host, the address of my router.  Logs from
>> other
>> applications (FTP, Sendmail) all report the correct address of remote
>> host.
>> If I telnet to port 80 from another server on the LAN, the httpd logs
> show
>> the address of the server.  I searched the FAQ and the archives but
> didn't
>> find anything like this.  Any thoughts/suggestions would be appreciated.
>> >
>> > Thanks,
>> > Greg
>> >
>> > ---------------------------------------------------------------------
>> > The official User-To-User support forum of the Apache HTTP Server
>> Project.
>> > See <URL:http://httpd.apache.org/userslist.html> for more info.
>> > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>> >   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
>> > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>> >
>> >
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server
> Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>>    "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
>> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>>
>>
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server
> Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>>    "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
>> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>    "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux