X_FORWARDED_FOR, squid and apache IP cheating

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

This is my current setup in using squid3 as reverse proxy in front of apache:

browser (e.g. 202.182.201.3) <----> squid3 stable6 <----> apache 1.3.37 (PHP)

My PHP will get the user IP by HTTP_X_FORWARDED_FOR pass by squid.

Now the problem is:

1. if user send a request already contains header of
"X_FORWARDED_FOR", Apache will ignore the value set by Squid and will
use the client one,
so my program will be cheated by the client as the IP can be any
specified by client.

This only occur in Apache 1.x but not Apache 2.x

Any idea?

Thanks.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux