By the way guys. It just worked. Thanks alot Amos and Matus. Thank You. Bien cordialement, Piyush Gaba Software Engineer TGI/OLN- INDIA Tower B, 8th Floor, DLF Infinity Towers, DLF Cyber City Phase - II Gurgaon - 122002, Haryana, INDIA G Mobile: +91-9818498198 [Email] piyush.gaba@xxxxxxxxxx -----Original Message----- From: squid-users [mailto:squid-users-bounces@xxxxxxxxxxxxxxxxxxxxx] On Behalf Of Amos Jeffries Sent: Tuesday, September 8, 2020 20:42 To: squid-users@xxxxxxxxxxxxxxxxxxxxx Subject: Re: Forwarded-for functionality(squid) On 9/09/20 1:15 am, piyush.gaba wrote: > Hi Matus, > > Thank you for your reply. > > I think my whole struggle is to get the desired output as: > <ip>- - [17/Aug/2018:08:43:29 +0200] "GET /index1.html HTTP/1.1" 200 36 "-" "curl/7.29.0" unknown > > Which has "unknown" at the end because forwarded_for was set to "off". > > But now when I am working with squid 4.13 I am not getting the desired output, I am getting the output as, > <ip> - - [08/Sep/2020:15:07:19 +0200] "GET /index1.html HTTP/1.1" 200 8 "-" "curl/7.29.0" > > Which does not have anything at the end, while the forwarded_for is set to "off". > > Please let me know if you have any advice to give for this logging problem. > > I am using below log format in my httpd file, > LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined > That LogFormat tells us the first column of the log file is the contents of the X-Forwarded-For header. The first column of the log lines you showed is "<ip>" - the value of XFF header is supposed to be one or more IPs, so that looks like it is working. Use the debug_options setting I gave you to *actually* see what is happening. The Apache log is only showing you what values are _after_ the httpd process and all modules have done their modifications to the HTTP input ... including replacing the transaction client-IP with any value from XFF header. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users _________________________________________________________________________________________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and delete this message and its attachments. As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified. Thank you. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
