I think you missed Alex's point.

That page itself sits behind a reverse proxy that adds X-Forwarded-For. So using that for your testing isn't going to help.


On 10/09/2013 03:01 PM, [email protected] wrote:
Well for Heaven's sake.

What motivation could he possibly have for dinking with teh headers?


On Wed, Oct 9, 2013, at 11:08, Alex Rousskov wrote:
On 10/09/2013 10:15 AM, [email protected] wrote:
Looks like turning off x-forwarded-for, has been disabled now.  Nothing
works.
To see what I'm talking about, go to
http://www.ericgiguere.com/tools/http-header-viewer.html

The above web page hosts a script that cannot be used as intended
because it sits behind a server that adds X-Forwarded-For and alters
some other HTTP headers.

Try testing with something more reliable, like taking a packet capture
and looking at the actual HTTP requests sent by Squid.


HTH,

Alex.


Reply via email to