On Sun, 25 Jan 2004, Florian Effenberger wrote: > When using ACLs that set access controls on an IP basis - which IP counts? > The one from the querying host (in this case another proxy that queries > Squid) or is the X-Forwarded-For header used?
Squid does not use the X-Forwarded-For header, unless you use it in an external acl. If using custom log formats then the header may also be logged. > My problem is that I fear that cannot use any ACLs if Squid is not the first > proxy in the row, but the second one. There is two options here a) Build an external acl using the X-Forwarded-For header as input. b) The follow_xff patch from http://devel.squid-cache.org/ Regards Henrik
