Bug #1528

support chained proxies in mod_extforward

Added by glen over 5 years ago. Updated over 5 years ago.

Status:FixedStart date:
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:mod_extforward
Target version:1.4.19
Missing in 1.5.x:

Description

need something like this for lighttpd:

http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/SOURCES/mod_rpaf_degtine.patch

mod_rpaf always uses the last value from the X-Forwarded-For header as
the client IP, breaking when you have several chained proxies (i.e.
Pound in front of Squid in front of Apache).

The attached patch makes it use the last address in the header which is
not in RPAFproxy_ips, falling back to the first one if they are all
known proxies.

1528.patch Magnifier - first test (4.47 KB) glen, 2008-01-18 16:49

1528.2.patch Magnifier - test2 (4.72 KB) glen, 2008-01-18 16:59

1528.3.patch Magnifier - test3 (9.75 KB) glen, 2008-01-19 18:45

1528.4.patch Magnifier - test4 -- do not handle "all" in chained proxies (9.78 KB) glen, 2008-01-19 19:06

History

#1 Updated by glen over 5 years ago

  • Status changed from New to Assigned

#2 Updated by glen over 5 years ago

  • Status changed from Assigned to Fixed
  • Resolution set to fixed

Committed revision r2061

Also available in: Atom