Your message dated Fri, 11 Jan 2008 14:09:23 +0100
with message-id <[EMAIL PROTECTED]>
and subject line Bug#457003: squid: you should enable follow-x-forwarded-for
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: squid
Version: 2.6.5-6
Severity: normal
Tags: patch
Hi!
I'm configuring dansguardian + squid (squid *after* dansguardian), I can
enable X-Forwarded-For in dansguardian, but the current squid package
doesn't accept the follow_x_forwarded_for , acl_uses_indirect_client and
log_uses_indirect_client which I need to keep the ACLs and curret log
files (and log analyzer) unchanged and useful.
anyway, you just need to add the --enable-follow-x-forwarded-for option
to the configure command in debian/rules.
A patch would be something like this:
diff -ru squid-2.6.5/debian/rules squid-2.6.5-nuevo/debian/rules
--- squid-2.6.5/debian/rules 2007-12-18 21:20:21.000000000 -0430
+++ squid-2.6.5-nuevo/debian/rules 2007-12-18 20:41:20.000000000
-0430
@@ -146,6 +146,7 @@
--enable-useragent-log \
--enable-auth="basic,digest,ntlm" \
--enable-carp \
+ --enable-follow-x-forwarded-for \
--with-large-files \
$(DEB_HOST_ARCH_CPU)-debian-$(DEB_HOST_ARCH_OS)
ifeq ($(DEB_HOST_ARCH_OS), linux)
I used that, and it works (I get the "original" IPs in the logs,and ACLs
are applied correctly, just as expected).
Thanks!
Ildefonso Camargo
-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-5-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Versions of packages squid depends on:
ii adduser 3.102 Add and remove users and groups
ii coreutils 5.97-5.3 The GNU core utilities
ii debconf [debconf-2.0] 1.5.11 Debian configuration management sy
ii libc6 2.3.6.ds1-13etch2 GNU C Library: Shared libraries
ii libdb4.4 4.4.20-8 Berkeley v4.4 Database Libraries [
ii libldap2 2.1.30-13.3 OpenLDAP libraries
ii libpam0g 0.79-4 Pluggable Authentication Modules l
ii logrotate 3.7.1-3 Log rotation utility
ii lsb-base 3.1-23.2etch1 Linux Standard Base 3.1 init scrip
ii netbase 4.29 Basic TCP/IP networking system
ii squid-common 2.6.5-6 Internet Object Cache (WWW proxy c
squid recommends no packages.
-- debconf information excluded
diff -ru squid-2.6.5/debian/rules squid-2.6.5-nuevo/debian/rules
--- squid-2.6.5/debian/rules 2007-12-18 21:20:21.000000000 -0430
+++ squid-2.6.5-nuevo/debian/rules 2007-12-18 20:41:20.000000000 -0430
@@ -146,6 +146,7 @@
--enable-useragent-log \
--enable-auth="basic,digest,ntlm" \
--enable-carp \
+ --enable-follow-x-forwarded-for \
--with-large-files \
$(DEB_HOST_ARCH_CPU)-debian-$(DEB_HOST_ARCH_OS)
ifeq ($(DEB_HOST_ARCH_OS), linux)
--- End Message ---
--- Begin Message ---
Package: squid
Version: 2.6.10-1
Hi Ildefonso,
the X-Forwaded-For setting has been enabled in squid 2.6.10-1. Update
policy for debian stable release prevents non-security and non-critical
changes to released packages. If you need an updated package you can
build it by yourself or download it from backports.org.
Regards,
L
signature.asc
Description: Questa รจ una parte del messaggio firmata digitalmente
--- End Message ---
