Bug #1528

support chained proxies in mod_extforward

Added by glen over 2 years ago. Updated over 2 years ago.

Status:Fixed Start:
Priority:Normal Due date:
Assigned to:- % Done:

0%
Category:mod_extforward
Target version:1.4.19
Missing in 1.5.x:

Description

need something like this for lighttpd:

http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/SOURCES/mod_rpaf_degtine.patch

mod_rpaf always uses the last value from the X-Forwarded-For header as the client IP, breaking when you have several chained proxies (i.e. Pound in front of Squid in front of Apache).

The attached patch makes it use the last address in the header which is not in RPAFproxy_ips, falling back to the first one if they are all known proxies.

1528.patch - first test (4.5 KB) glen, 01/18/2008 04:49 pm

1528.2.patch - test2 (4.7 KB) glen, 01/18/2008 04:59 pm

1528.3.patch - test3 (9.7 KB) glen, 01/19/2008 06:45 pm

1528.4.patch - test4 -- do not handle "all" in chained proxies (9.8 KB) glen, 01/19/2008 07:06 pm

History

Updated by glen over 2 years ago

  • Status changed from New to Assigned

Updated by glen over 2 years ago

  • Status changed from Assigned to Fixed
  • Resolution set to fixed

Committed revision r2061

Also available in: Atom