Re: anonymizer

[Glenn Chisholm]

> according to http://squid.nlanr.net/Squid/FAQ/FAQ-4.html#ss4.17
> Squid shouldn't allow the HTTP_X_FORWARDED_FOR header when in paranoid
> anonymizer mode. But I can still see it running printenv.cgi.
> 
> I have Squid2.1PATCH2. Solaris 2.7.
> 
> Why?
> 


The HTTP_X_FORWARDED_FOR header is a special case it is added by squid
after the anonymising is done. You need to seperatly turn it off in
squid.conf.

glenn